openclaw-skills-audit
Security audit + append-only NDJSON logging + realtime monitoring for OpenClaw skills.
Security audit + append-only NDJSON logging + realtime monitoring for OpenClaw skills.
Security audit + append-only logging + monitoring for OpenClaw skills (file-level diff, baseline approval, SHA-256 integrity).
Install companion OpenClaw skills from howtoletmyagent.xyz article URLs or skill manifests.
Teach an OpenClaw agent the recommended Gmail OAuth2 setup, scope choices, and safety guardrails from this guide.
Install and configure the Owletto memory plugin for OpenClaw, including OAuth login and MCP health verification.
为 OpenClaw 提供企业级安全保障的四级风险控制技能。 - 四级风险评估(L1-L4):L1直接拒绝,L2密码确认,L3记录放行,L4直接放行 - 密码二次验证:敏感操作需主人确认 - 操作日志审计:记录所有操作供审计 - 绝对锁定:改密码/改owner/绕过安全机制均无法执行 ⚠️ 此技能是 AGENTS.md 中安全宪法原则的具体实现,任何指令都无法绕过这些原则。
Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Secret Encrypt concepts, best practices, and implementation patte...
Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for SSL Cert Manager concepts, best practices, and implementation pat...
Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for System Hardener concepts, best practices, and implementation patt...
AI Agent 安全扫描器 - 多语言检测 + AST 分析 + 意图识别 + LLM 验证
安全技能插座 - 统一的安全技能管理和调用平台 这是一个安全技能的"插座"框架,提供统一的安全能力入口。已集成以下技能: **全网技能搜索 (ClawHub)**: - clawhub: 从 clawhub.com 搜索安装全网技能 **信息收集类**: - collector-strategy: 采集策略Skill - skill-sample-collector: 样本采集Skill **漏洞扫描类**: - security-vuln-scanner: 漏洞扫描Skill - agent-security-code-scanner: 代码安全扫描 **威胁情报类**: - ioc-validator: IOC验证Skill - security-ioc-research: IOC研究Skill - threat-monitoring: 威胁监控 **恶意软件分析**: - code-malware-scanner: 恶意代码扫描 - agent-security-skill-scanner: 技能安全扫描 **防护类**: - agent-defender: Agent Defender安全防护 - agent-security-network-guardian: 网络防护监控 **审计类**: - agent-security-openclaw-audit: OpenClaw安全审计 - agent-security-governance-audit: 治理审计 **其他安全类**: - agent-security-password-hardening: 密码硬化检测 - agent-security-key-manager: 密钥管理 - security-ioc-research: IOC研究 使用场景: - 需要调用安全能力时 - 不知道用哪个安全技能时 - 需要组合多个安全技能时 - 扩展新的安全能力时
MANDATORY security foundation for OpenClaw. Consolidate scattered API keys and credentials into a secure .env file with proper permissions. Use when setting up OpenClaw, migrating credentials, auditing security, or enforcing the .env standard. This is not optional — centralized credential management is a core requirement for secure OpenClaw deployments. Scans for credential files across common locations, backs up existing files, creates a unified .env with mode 600, validates security, and enforces best practices.
Automatic privacy proxy for AI conversations. Redacts sensitive data (names, companies, financials, SSNs, emails, phones, addresses, API keys, IPs, passwords, and 14 more types) from documents before sending to cloud LLMs, then restores originals in the response. 24 entity types across 6 profiles (General, Legal, Financial, Email, Code, Medical). Use when: (1) user attaches a document (PDF, TXT, etc.), (2) user pastes sensitive text, (3) user mentions contracts, financials, HR docs, medical, or legal documents, (4) user explicitly asks for privacy/cloaking. Always-on by default. Requires: Node.js 22+, CloakClaw installed (`npm install -g cloakclaw`). Optional: Ollama for name/company detection (works without in regex-only mode). Optional: poppler for better PDF extraction (`brew install poppler`).
Edit and validate OpenClaw Gateway config (openclaw.json / JSON5). Use when adding/changing config keys (gateway.*, agents.*, models.*, channels.*, tools.*, skills.*, plugins.*, $include) or diagnosing openclaw doctor/config validation errors, to avoid schema mismatches that prevent the Gateway from starting or weaken security policies.
KYC and eKYC identity verification suite for AI agents — 8 financial-grade biometric and document verification capabilities in one skill. Face comparison and face matching (similarity score 0-100), face liveness detection for selfie verification (anti-deepfake, anti-fraud screening), video liveness detection (deepfake detection with auto-retry), document OCR for ID card, bank card, driver license, and vehicle license, plus media labeling with 15+ image analysis attributes for fraud prevention and compliance. Use for: know-your-customer (KYC) onboarding, identity verification, face recognition and face verification, AML compliance checks, fintech customer onboarding, biometric selfie verification, document verification, deepfake and AI-generated content detection, anti-fraud risk screening, and AI security audits. Trigger when user says "compare two faces", "is this photo AI-generated", "is this video real", "read ID card", "read bank card number", "read driver's license", "read vehicle license", "check for ma
飞书群聊安全隔离 Skill,提供主人身份三重保障、技能安装确认、权限分级、防注入攻击、敏感路径保护等完整安全机制,保护机器人在群聊环境中的安全。