OpenClaw Security Suite

A comprehensive security protection layer for OpenClaw extensions, providing both static analysis and AI-assisted behavioral review.

Features

This suite bundles two core security capabilities:

1. Static Security Scan (action: "scan")

Analyzes a full skill directory for deterministic threats:

• Blocked Imports: e.g., child_process, cluster
• Dangerous Functions: e.g., exec(), spawn()
• Known Bad Keywords: e.g., eval(, __proto__, rm -rf
• Sensitive File Access: e.g., /etc/passwd, /.env
• Suspicious Regex Patterns: e.g., curl ... | bash