OpenClaw Security Handbook (CN)

基于 ZAST.AI 安全手册的 OpenClaw 安全审计与加固技能。运行全面安全诊断（内置 audit + 手册补充项），生成结构化报告，提供交互式修复引导，支持定时审计调度。触发场景：安全审计、安全加固、漏洞检查、security audit、hardening、暴露检查。

This skill is internally consistent for performing a local OpenClaw security audit, but it will read sensitive local files (logs, session files, MEMORY.md, installed skill sources) to look for secrets and risky code. Before running: 1) ensure you trust the skill and run it on a machine where exposing those files to the agent is acceptable (prefer a disposable VM); 2) review the included scripts and the commands in references/fix-commands.md — especially any commands that write tokens to ~/.openclaw/.env or delete directories; 3) do not blindly accept automatic fixes for operations that modify tokens/configs or remove files — back up before applying fixes; 4) the publish script will attempt to package/publish only if you run it and confirm. If you want minimal risk, run the audit commands manually and inspect the generated JSON/report rather than allowing automated fix actions.

Type: OpenClaw Skill Name: openclaw-security-handbook-cn Version: 1.0.0 The skill bundle is a legitimate security auditing and hardening tool designed for the OpenClaw environment. It performs comprehensive checks for file permissions, secret leaks in logs, exposed network ports, and suspicious patterns in other installed skills using standard system commands (ls, stat, grep, find, ss). The logic in SKILL.md and scripts/security-report.py follows a 'user-in-the-loop' model, requiring explicit confirmation before applying any fixes, and the provided commands are well-aligned with its stated purpose of security diagnostics based on the ZAST.AI Security Handbook.