Provides AI-driven security protection for OpenClaw with threat detection, risk alerts, real-time interception, file and permission management, and security...

This package is internally inconsistent rather than overtly malicious. Before installing: (1) ask the author for the missing runtime (src/main.py) and for the implementation of the advertised cloud threat library and WebSocket endpoints; (2) verify the repository URL and review any network code (requests/websockets) for endpoints and auth handling; (3) confirm whether the package will run code that touches your home directory (it expands '~' and checks absolute paths) and run it first in a sandboxed environment; (4) be cautious of the tests' hard-coded sys.path (/home/admin/.openclaw/…), which reveal assumptions about host paths — ensure installation won't implicitly rely on or overwrite those locations; (5) if you need cloud features, require explicit declaration of required env vars/credentials and inspect how they are stored/transmitted. Given the missing main runtime and overpromises, do not install in production until the author provides the missing runtime code and a clear security/privacy design.

Type: OpenClaw Skill Name: claw-def Version: 1.0.0 The 'claw-def' skill bundle is a security utility designed to protect the OpenClaw environment from malicious activities. The core logic in 'src/file_protection.py' implements a legitimate access control system that categorizes file paths into 'critical' (e.g., SSH keys, GPG, system passwords), 'restricted' (e.g., AWS/Azure credentials), and 'allowed' zones, effectively blocking or prompting for permission upon access. The bundle includes comprehensive test suites and extensive documentation (README.md, SKILL.md, and various marketing/release plans) that are entirely consistent with its stated purpose of providing a native security layer. No indicators of data exfiltration, malicious execution, or harmful prompt injection were identified.