openclaw-security-checker
OpenClaw 安全检测器
基于《OpenClaw 极简安全实践指南》和《安全验证与攻防演练手册》的全面安全检测工具。对 OpenClaw 实例的配置、权限、隔离、网络、日志进行系统化审查，输出可量化的安全评分和修复建议。
Purpose
OpenClaw 实例运行在 Docker 容器中，每用户独占一个容器（JoySafeter 架构）。该技能负责对实例的安全面进行系统化检测，覆盖部署前配置审查、运行时权限验证、隔离区合规检查三个阶段。
Prerequisites
环境要求
- OpenClaw 实例已部署并可访问（本地或容器内）
- 对
~/.openclaw/目录有读取权限 openclaw.json配置文件可读
目标实例信息
- OpenClaw 版本号（
openclaw --version） - 部署模式：local / docker / kubernetes
- Gateway 端口和绑定范围
More from jd-opensource/joysafeter
pentest-osint-recon
Open Source Intelligence gathering and attack surface management for external reconnaissance.
89pentest-mobile-app
OWASP Mobile Top 10 security testing for Android and iOS — local storage, certificate pinning bypass, IPC abuse, and binary protections.
59pentest-api-deep
Deep OWASP API Security Top 10 testing for REST, GraphQL, gRPC, and WebSocket APIs — BFLA, mass assignment, rate limiting, and unsafe consumption.
58pentest-exploit-validation
Proof-driven exploitation with 4-level evidence system, bypass exhaustion protocol, mandatory evidence checklists, and strict EXPLOITED/POTENTIAL/FALSE_POSITIVE classification.
54pentest-ai-llm-security
AI/LLM application security testing — prompt injection, jailbreaking, data exfiltration, and insecure output handling per OWASP LLM Top 10.
54pentest-secrets-exposure
Discover hardcoded credentials, leaked API keys, exposed configuration files, sensitive data in artifacts, and information disclosure via error handling.
52