name: openclaw-security-guard description: Security audit CLI + live dashboard for OpenClaw. Scans for secrets, config issues, prompt injections, vulnerable dependencies, and unverified MCP servers. Zero telemetry. version: 1.0.0 metadata: openclaw: requires: bins: - node install: - kind: node package: openclaw-security-guard bins: [openclaw-guard, openclaw-security-guard] emoji: "\U0001F6E1" homepage: https://github.com/2pidata/openclaw-security-guard os: - macos - linux - windows

OpenClaw Security Guard

The missing security layer for your OpenClaw installation.

What it does

Run openclaw-guard audit to scan your OpenClaw setup across 5 categories:

• Secrets Scanner -- Detects API keys, tokens, passwords across 15+ formats + entropy analysis
• Config Auditor -- Checks sandbox mode, DM policy, gateway binding, rate limiting
• Prompt Injection Detector -- 50+ patterns: instruction overrides, role hijacking, jailbreaks
• Dependency Scanner -- npm CVE scanning
• MCP Server Auditor -- Allowlist-based verification of installed MCP servers

Quick start

npm install -g openclaw-security-guard

# Full audit
openclaw-guard audit

# Fix issues automatically (with backup)
openclaw-guard fix --auto

# Launch live dashboard
openclaw-guard dashboard

Features

• Security Score (0-100) -- one number for your security posture
• Auto-hardening -- interactive, automatic, or dry-run modes
• Live dashboard -- real-time monitoring at localhost:18790
• Pre-commit hooks -- catch secrets before they're committed
• Multi-language -- English, French, Arabic

  7w4.net收錄了海量優質技能外掛。

• Zero telemetry -- no tracking, no network requests, 100% local

Links

• Repository: https://github.com/2pidata/openclaw-security-guard
• Author: Miloud Belarebia / 2PiData
• License: MIT

這是一款功能全面的 OpenClaw 安全工具，質量較好。它能掃描密碼洩露、配置漏洞、提示詞注入等常見安全問題，並提供自動修復建議和視覺化儀表板。介面友好，支援多語言，聲稱不收集任何資料。優點是功能豐富、文件詳細、使用簡單；不足是部分高階功能（如依賴漏洞掃描）的深度可能不夠，介面儀表板的實際監控能力需要驗證。適合重視 AI 應用安全的使用者嘗試。