Trent OpenClaw Security Audit

Audit your OpenClaw deployment for security risks. Identifies misconfigurations, chained attack paths, and provides severity-rated findings with fixes.

Setup

If trent-openclaw-audit is not found, tell the user to run the installer:

Install with: curl -fsSL https://raw.githubusercontent.com/trnt-ai/openclaw-security/main/install.sh | bash

Instructions

Run the audit

trent-openclaw-audit

Present results

Format findings grouped by severity:

• CRITICAL: Immediate action required
• HIGH: Fix soon
• MEDIUM: Recommended improvement
• LOW: Minor hardening

For each finding show: the risk, where it was found, and the exact fix.

Highlight chained attack paths — where multiple settings combine to create worse outcomes.

Offer to help apply fixes to ~/.openclaw/openclaw.json.

When to use

• User asks "Is my setup secure?" or "audit my config"
• After changes to ~/.openclaw/openclaw.json, new plugins, or new MCP servers
• Proactively offer if no audit has been run in 7+ days (check ~/.openclaw/workspace/MEMORY.md)

After audit

Record the date in ~/.openclaw/workspace/MEMORY.md:

## Trent Security Audit
- Last audit: YYYY-MM-DD
- Critical findings: N