# Openclaw Security Guard

> Security guard for OpenClaw users. Audit configs, scan secrets, manage access, and generate security reports.

- Skill: `hkall/openclaw-security-guard` (Agent Skill, multi-file: 7 files)
- Install (CLI): `npx skillmds@latest add hkall/openclaw-security-guard`
- Raw SKILL.md: https://api.skillmd.com/api/skills/hkall/openclaw-security-guard/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: hkall (https://skillmd.com/u/hkall)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/hkall/openclaw-security-guard

---


# OpenClaw Security Guard

A comprehensive security tool for OpenClaw users to protect their AI assistant.

## Features

- 🔍 **Security Audit** - Comprehensive security configuration check
- 🔐 **Secret Scanner** - Detect exposed API keys and tokens
- 👥 **Access Control** - Manage devices, users, and permissions
- 🔑 **Token Manager** - Rotate and validate tokens
- 📊 **Security Report** - Generate detailed security reports
- 🛡️ **Hardening** - Apply security best practices

## Requirements

- Python 3.6+
- No external dependencies (uses stdlib)

## Commands

```bash
# Run security audit
python3 {baseDir}/scripts/main.py audit

# Scan for secrets
python3 {baseDir}/scripts/main.py scan

# Generate report
python3 {baseDir}/scripts/main.py report --format md

# Check token status
python3 {baseDir}/scripts/main.py token status

# Access control
python3 {baseDir}/scripts/main.py access list

# Security hardening
python3 {baseDir}/scripts/main.py harden --fix

# Quick status check
python3 {baseDir}/scripts/main.py status
```

## Options

```
--format, -f <format>    Output format: json, md, table (default: table)
--lang, -l <lang>        Language: en, zh (default: auto-detect)
--quiet, -q              Quiet mode, only output results
--verbose, -v            Verbose output
--output, -o <file>      Output file path
--deep                   Deep scan mode
--fix                    Auto-fix issues where possible
```

## Security Checks

| Category | Checks |
|----------|--------|
| Config | Gateway bind, auth mode, token strength |
| Secrets | API keys, tokens, passwords, private keys |
| Access | Devices, users, channels, sessions |
| Network | Public exposure, open ports |

## Examples

```bash
# Full audit with auto-fix
python3 {baseDir}/scripts/main.py audit --deep --fix

# Generate markdown report
python3 {baseDir}/scripts/main.py report --format md -o security.md

# Scan for specific pattern
python3 {baseDir}/scripts/main.py scan --pattern "sk-"

# List all paired devices
python3 {baseDir}/scripts/main.py access devices

# Generate JSON report
python3 {baseDir}/scripts/main.py report --format json
```

## Output Formats

### Table (default)
```
🔐 OpenClaw Security Guard v1.0.0
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

📊 Security Score: 72/100 ⚠️

🔴 HIGH RISK
  • API Key exposed in config file
    Location: ~/.openclaw/openclaw.json:15
```

### JSON
```json
{
  "score": 72,
  "findings": [...]
}
```

### Markdown
```markdown
# Security Report
**Score**: 72/100
```

## Languages

- English (en)
- 中文 (zh)

Auto-detected based on system locale.

## License

MIT

## Version

v1.0.0