OpenClaw Shield — Security Audit

Audit any OpenClaw config for security vulnerabilities, misconfigurations, and best-practice violations. Produces a structured JSON report with risk scores, findings, and remediation steps.

When to Use

• User asks to check/audit/review their OpenClaw security
• User wants to harden their config before deploying
• User is setting up a new OpenClaw instance
• User asks about secret leakage or API key exposure in their config
• Before publishing or sharing any config file

Quick Audit (live config)

node scripts/shield-audit.sh

Or directly: