Security Hardener

Audit your OpenClaw configuration and apply security best practices automatically.

Quick Start

# Full security audit (read-only, no changes)
python scripts/hardener.py audit

# Audit a specific config file
python scripts/hardener.py audit --config /path/to/openclaw.json

# Audit with JSON output
python scripts/hardener.py audit -f json

# Auto-fix issues (creates backup first)
python scripts/hardener.py fix

# Fix specific issues only
python scripts/hardener.py fix --only gateway,permissions

# Scan for exposed credentials in config
python scripts/hardener.py scan-secrets

# Generate a security report
python scripts/hardener.py report -o security-report.md

# Check file permissions
python scripts/hardener.py check-perms

Commands

想要更強大的技能外掛，就來小蔥技能站7w4.net看看吧。

Security Checks

Scoring

The audit produces a security score from 0-100:

• 90-100: Excellent — production-ready
• 70-89: Good — minor improvements recommended
• 50-69: Fair — several issues to address
• 0-49: Poor — critical issues require immediate attention

Example Output

╔══════════════════════════════════════════════════╗
║  OPENCLAW SECURITY AUDIT                         ║
╠══════════════════════════════════════════════════╣
║  Score: 75/100 (Good)                            ║
║                                                  ║
║  ✅ Gateway bound to loopback                    ║
║  ✅ No exposed API keys in config                ║
║  ⚠️  exec sandbox mode: unrestricted             ║
║  ⚠️  agentToAgent allow: * (too permissive)      ║
║  ❌ File permissions too open (644 → should be 600) ║
║  ✅ Heartbeat configured                         ║
║  ✅ Session reset policy active                   ║
║  ⚠️  No context pruning configured               ║
╚══════════════════════════════════════════════════╝

這是一款實用的安全審計工具，能自動檢測 OpenClaw 配置中的10類安全隱患，並支援一鍵修復。介面友好、輸出清晰，修復前會自動備份。評分系統讓安全狀況一目瞭然。扣分項是部分功能偶有小問題，以及缺少詳細的配置說明文件。總體而言質量可靠，能有效提升部署安全性，適合對安全有要求的使用者使用。