← 返回 Skills 市场
180
总下载
1
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install shieldclaw
功能描述
Security suite for OpenClaw. Provides security scanning, real-time protection, audit logging, and sensitive data encryption. Use this skill when users need s...
安全使用建议
ShieldClaw appears internally consistent with a local security tool, but before installing: 1) review the runtime behavior of the included plugins (@shieldclaw/scan, /guard, /audit, /vault) since only their import names appear in the bundle — these implementations determine whether any network calls or unexpected operations occur; 2) be aware the skill will access/monitor sensitive paths (default ~/.ssh and ~/.aws) and will create a local DB and config files in your user data directory; 3) if you plan to enable Guard strict/auto-blocking or automatic scans on install, test in a controlled environment first so you don't accidentally block legitimate tools; and 4) if you require higher assurance, ask the author for the source code of the referenced @shieldclaw/* packages or run the plugin in a sandbox to inspect its behavior.
功能分析
Type: OpenClaw Skill
Name: shieldclaw
Version: 1.0.4
The 'shieldclaw' bundle is a security suite providing scanning, real-time protection, and data encryption. The integration code in 'apps/openclaw-integration/dist/index.js' and 'dist/index.js' serves as a boilerplate framework for loading security plugins (Scan, Guard, Audit, Vault) and managing system hooks. While the bundle requests broad permissions (filesystem, network, storage) and describes high-risk capabilities like network interception and process monitoring, these are strictly aligned with its stated defensive purpose. The implementation is professional, lacks obfuscation, and contains no evidence of malicious intent, data exfiltration, or unauthorized access.
能力评估
Purpose & Capability
Name/description, manifest permissions (filesystem, network, storage), README and SKILL.md all describe a security suite that scans code, monitors file/network/process operations, audits events, and encrypts secrets. The declared capabilities align with the requested permissions and included code that wires in Scan/Guard/Audit/Vault plugins.
Instruction Scope
SKILL.md and README instruct the agent to scan skill directories, protect sensitive paths (default: ~/.ssh, ~/.aws), and store audit logs locally. This matches the skill purpose. Note: Guard promises real-time fs/network/process interception; the provided integration code contains a HookFramework skeleton and relies on external Guard plugin implementations to do the actual hooking. Verify what the Guard plugin does at runtime before enabling strict/automatic blocking.
Install Mechanism
No install spec (instruction-only install) is provided, but compiled JS files are bundled in the package (dist/*.js). Nothing downloads arbitrary archives or uses an untrusted URL. There is no installer that fetches code from unknown hosts in the manifest.
Credentials
The skill does not request environment variables or credentials, which is appropriate. However it defaults to protecting/accessing highly sensitive filesystem locations (~/.ssh, ~/.aws) and uses the system keychain for encryption keys and a local SQLite DB. These are proportionate to a local security product, but you should be aware the skill will read/write those locations and may require OS keychain APIs.
Persistence & Privilege
always is false and autonomous invocation is allowed by default. The skill will create configuration and database files in the user's data directory (documented in README). That local persistence is expected for an audit/guard/vault product and doesn't modify other skills or system-wide agent settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install shieldclaw - 安装完成后，直接呼叫该 Skill 的名称或使用
/shieldclaw触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.4
No changes detected in this version.
- The skill description, features, configuration, and recommendations remain unchanged.
- No file modifications were detected in this release.
v1.0.3
- SKILL.md translated from Chinese to English for broader accessibility.
- No code or functionality changes; documentation only.
- All features, configuration options, and usage scenarios remain the same.
v1.0.2
- Added OpenClaw integration files in apps/openclaw-integration/dist (index.js, index.d.ts, and maps)
- Removed README.en.md
- SKILL.md rewritten in Chinese with improved structure, richer usage examples, detailed abilities for each core feature (Scan, Guard, Vault, Audit), and configuration table
- Expanded security recommendations and clarified supported environments and limitations
v1.0.1
Version 1.0.1
- Added a CHANGELOG.md file.
- Updated SKILL.md: streamlined feature descriptions and removed pricing/tier information.
- Revised audit report section for clarity; simplified references to "security reports" instead of "compliance" reports.
- Moved feature and limitation details for better readability.
v1.0.0
🎉 ShieldClaw 1.0.0 - Initial Release!
✨ Core Features:
- 🔍 Scan: Security scanning and risk assessment for OpenClaw Skills
- 🛡️ Guard: Real-time behavior monitoring and threat interception
- 📊 Audit: Operation logging and security reporting
- 🔐 Vault: Sensitive data encryption and secure storage
💰 Pricing:
- Free: $0 forever, essential security features
- Pro: $1.4/month, unlock advanced features
- Team: $0.8-1.4/seat/month, best for teams
🚀 Ready to protect your OpenClaw environment!
元数据
常见问题
ShieldClaw 是什么？
Security suite for OpenClaw. Provides security scanning, real-time protection, audit logging, and sensitive data encryption. Use this skill when users need s... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 180 次。
如何安装 ShieldClaw？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install shieldclaw」即可一键安装，无需额外配置。
ShieldClaw 是免费的吗？
是的，ShieldClaw 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
ShieldClaw 支持哪些平台？
ShieldClaw 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 ShieldClaw？
由 jzming9（@jzming9）开发并维护，当前版本 v1.0.4。
推荐 Skills