OpenClaw Security Suite
One skill to install, configure, and orchestrate the entire OpenClaw security stack.
Install All Security Tools
CODEBLOCK0
Installs all 11 free security skills from ClawHub.
Unified Dashboard
CODEBLOCK1
Aggregated health check across all installed security tools.
Full Security Scan
CODEBLOCK2
Runs every scanner: integrity verification, secret detection, permission audit, network DLP, supply chain analysis, injection scanning, credential exposure, and compliance audit.
First-Time Setup
CODEBLOCK3
Initializes all tools that need it: integrity baseline, skill signing, audit ledger, compliance policy.
Update All Tools
CODEBLOCK4
Updates all installed security skills to latest versions via ClawHub.
List Installed Tools
CODEBLOCK5
Shows which security tools are installed and their versions.
Pro Protection Sweep
CODEBLOCK6
Runs automated countermeasures across all installed Pro tools. Requires Pro versions.
What Gets Orchestrated
| Tool | Domain | Free | Pro |
|---|
| warden | Workspace integrity, injection detection | Detect | Restore, rollback, quarantine |
| sentry |
Secret/credential scanning | Detect | Redact, quarantine |
|
arbiter | Permission auditing | Detect | Revoke, enforce |
|
egress | Network DLP, exfiltration detection | Detect | Block, allowlist |
|
ledger | Hash-chained audit trail | Record | Freeze, forensics |
|
signet | Cryptographic skill signing | Verify | Reject, restore |
|
sentinel | Supply chain security | Scan | Quarantine, block |
|
vault | Credential lifecycle | Audit | Fix, rotate |
|
bastion | Prompt injection defense | Scan | Sanitize, enforce |
|
marshal | Compliance/policy enforcement | Audit | Enforce, hooks |
|
triage | Incident response & forensics | Investigate | Contain, remediate |
Requirements
- - Python 3.8+
- No external dependencies (stdlib only)
- Cross-platform: Windows, macOS, Linux
技能名称: openclaw-security
详细描述:
OpenClaw 安全套件
一项技能，用于安装、配置和编排整个 OpenClaw 安全堆栈。
安装所有安全工具
bash
python3 {baseDir}/scripts/security.py install --workspace /path/to/workspace
从 ClawHub 安装全部 11 个免费安全技能。
统一仪表盘
bash
python3 {baseDir}/scripts/security.py status --workspace /path/to/workspace
对所有已安装安全工具进行聚合健康检查。
全面安全扫描
bash
python3 {baseDir}/scripts/security.py scan --workspace /path/to/workspace
运行所有扫描器：完整性验证、秘密检测、权限审计、网络 DLP、供应链分析、注入扫描、凭证泄露和合规审计。
首次设置
bash
python3 {baseDir}/scripts/security.py setup --workspace /path/to/workspace
初始化所有需要配置的工具：完整性基线、技能签名、审计账本、合规策略。
更新所有工具
bash
python3 {baseDir}/scripts/security.py update --workspace /path/to/workspace
通过 ClawHub 将所有已安装安全技能更新至最新版本。
列出已安装工具
bash
python3 {baseDir}/scripts/security.py list --workspace /path/to/workspace
显示已安装的安全工具及其版本。
Pro 防护扫描
bash
python3 {baseDir}/scripts/security.py protect --workspace /path/to/workspace
在所有已安装的 Pro 工具上运行自动化反制措施。需要 Pro 版本。
编排内容
| 工具 | 领域 | 免费版 | Pro 版 |
|---|
| warden | 工作区完整性、注入检测 | 检测 | 恢复、回滚、隔离 |
| sentry |
秘密/凭证扫描 | 检测 | 编辑、隔离 |
|
arbiter | 权限审计 | 检测 | 撤销、强制执行 |
|
egress | 网络 DLP、数据泄露检测 | 检测 | 阻止、白名单 |
|
ledger | 哈希链审计追踪 | 记录 | 冻结、取证 |
|
signet | 加密技能签名 | 验证 | 拒绝、恢复 |
|
sentinel | 供应链安全 | 扫描 | 隔离、阻止 |
|
vault | 凭证生命周期 | 审计 | 修复、轮换 |
|
bastion | 提示注入防御 | 扫描 | 清理、强制执行 |
|
marshal | 合规/策略执行 | 审计 | 强制执行、钩子 |
|
triage | 事件响应与取证 | 调查 | 遏制、修复 |
系统要求
- - Python 3.8+
- 无外部依赖（仅标准库）
- 跨平台：Windows、macOS、Linux
