OpenClaw Security Suite

One skill to install, configure, and orchestrate the entire OpenClaw security stack.

Install All Security Tools

python3 {baseDir}/scripts/security.py install --workspace /path/to/workspace

Installs all 11 free security skills from ClawHub.

Unified Dashboard

python3 {baseDir}/scripts/security.py status --workspace /path/to/workspace

Aggregated health check across all installed security tools.

Full Security Scan

python3 {baseDir}/scripts/security.py scan --workspace /path/to/workspace

Runs every scanner: integrity verification, secret detection, permission audit, network DLP, supply chain analysis, injection scanning, credential exposure, and compliance audit.

First-Time Setup

python3 {baseDir}/scripts/security.py setup --workspace /path/to/workspace

Initializes all tools that need it: integrity baseline, skill signing, audit ledger, compliance policy.

Update All Tools

python3 {baseDir}/scripts/security.py update --workspace /path/to/workspace

Updates all installed security skills to latest versions via ClawHub.

List Installed Tools

python3 {baseDir}/scripts/security.py list --workspace /path/to/workspace

Shows which security tools are installed and their versions.

Pro Protection Sweep

python3 {baseDir}/scripts/security.py protect --workspace /path/to/workspace

Runs automated countermeasures across all installed Pro tools. Requires Pro versions.

What Gets Orchestrated

| Tool | Domain | Free | Pro | |------|--------|------|-----| | warden | Workspace integrity, injection detection | Detect | Restore, rollback, quarantine | | sentry | Secret/credential scanning | Detect | Redact, quarantine | | arbiter | Permission auditing | Detect | Revoke, enforce | | egress | Network DLP, exfiltration detection | Detect | Block, allowlist | | ledger | Hash-chained audit trail | Record | Freeze, forensics | | signet | Cryptographic skill signing | Verify | Reject, restore | | sentinel | Supply chain security | Scan | Quarantine, block | | vault | Credential lifecycle | Audit | Fix, rotate | | bastion | Prompt injection defense | Scan | Sanitize, enforce | | marshal | Compliance/policy enforcement | Audit | Enforce, hooks | | triage | Incident response & forensics | Investigate | Contain, remediate |

Requirements

• Python 3.8+
• No external dependencies (stdlib only)
• Cross-platform: Windows, macOS, Linux