# Openclaw Security

> Unified security suite for agent workspaces. Installs, configures, and orchestrates all 11 OpenClaw security tools in one command — integrity, secrets, permissions, network, audit trail, signing, supply chain, credentials, injection defense, compliance, and incident response.

- Skill: `kbarbel640-del/openclaw-security` (Agent Skill, multi-file: 4 files)
- Install (CLI): `npx skillmds@latest add kbarbel640-del/openclaw-security`
- Raw SKILL.md: https://api.skillmd.com/api/skills/kbarbel640-del/openclaw-security/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: kbarbel640-del (https://skillmd.com/u/kbarbel640-del)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/kbarbel640-del/openclaw-security

---


# OpenClaw Security Suite

One skill to install, configure, and orchestrate the entire OpenClaw security stack.

## Install All Security Tools

```bash
python3 {baseDir}/scripts/security.py install --workspace /path/to/workspace
```

Installs all 11 free security skills from ClawHub.

## Unified Dashboard

```bash
python3 {baseDir}/scripts/security.py status --workspace /path/to/workspace
```

Aggregated health check across all installed security tools.

## Full Security Scan

```bash
python3 {baseDir}/scripts/security.py scan --workspace /path/to/workspace
```

Runs every scanner: integrity verification, secret detection, permission audit, network DLP, supply chain analysis, injection scanning, credential exposure, and compliance audit.

## First-Time Setup

```bash
python3 {baseDir}/scripts/security.py setup --workspace /path/to/workspace
```

Initializes all tools that need it: integrity baseline, skill signing, audit ledger, compliance policy.

## Update All Tools

```bash
python3 {baseDir}/scripts/security.py update --workspace /path/to/workspace
```

Updates all installed security skills to latest versions via ClawHub.

## List Installed Tools

```bash
python3 {baseDir}/scripts/security.py list --workspace /path/to/workspace
```

Shows which security tools are installed and their versions.

## Pro Protection Sweep

```bash
python3 {baseDir}/scripts/security.py protect --workspace /path/to/workspace
```

Runs automated countermeasures across all installed Pro tools. Requires Pro versions.

## What Gets Orchestrated

| Tool | Domain | Free | Pro |
|------|--------|------|-----|
| **warden** | Workspace integrity, injection detection | Detect | Restore, rollback, quarantine |
| **sentry** | Secret/credential scanning | Detect | Redact, quarantine |
| **arbiter** | Permission auditing | Detect | Revoke, enforce |
| **egress** | Network DLP, exfiltration detection | Detect | Block, allowlist |
| **ledger** | Hash-chained audit trail | Record | Freeze, forensics |
| **signet** | Cryptographic skill signing | Verify | Reject, restore |
| **sentinel** | Supply chain security | Scan | Quarantine, block |
| **vault** | Credential lifecycle | Audit | Fix, rotate |
| **bastion** | Prompt injection defense | Scan | Sanitize, enforce |
| **marshal** | Compliance/policy enforcement | Audit | Enforce, hooks |
| **triage** | Incident response & forensics | Investigate | Contain, remediate |

## Requirements

- Python 3.8+
- No external dependencies (stdlib only)
- Cross-platform: Windows, macOS, Linux