OpenClaw Security Hardening

Protect OpenClaw installations from prompt injection, data exfiltration, malicious skills, and workspace tampering

This package is a local hardening/audit toolkit and appears to do what it says: it will scan your skills/workspace and create local baselines and whitelists under $HOME/.openclaw/security. Before running: (1) review the scripts yourself (they run shell commands and inspect many files); (2) back up AGENTS.md, MEMORY.md and any important files, since harden-workspace.sh can modify permissions and .gitignore when run with --fix; (3) confirm you’re comfortable with files being written to ~/.openclaw/security (hash files, whitelist); (4) run scan tools in non-privileged/test environment first, then run with --fix only after manual review; (5) check the domain whitelist and incident logging locations (memory/security-incidents.md) so you know what will be recorded. Overall the pieces are coherent for a security tool — there are no unexplained external endpoints or credential requests, but exercising normal caution (review code and run in a controlled environment) is recommended.

Type: OpenClaw Skill Name: openclaw-security-hardening Version: 1.1.0 This skill bundle is a comprehensive security hardening toolkit for OpenClaw. All scripts (`audit-outbound.sh`, `harden-workspace.sh`, `install-guard.sh`, `integrity-check.sh`, `scan-skills.sh`) are designed to detect, prevent, or remediate security risks like prompt injection, data exfiltration, skill tampering, and misconfigurations. The `SKILL.md` and `assets/security-rules-template.md` explicitly define defensive measures for the AI agent. There is no evidence of intentional harmful behavior, data exfiltration, malicious execution, or persistence mechanisms within the provided files; all actions are aligned with the stated purpose of enhancing security.