Clawguard — Security skill for Claude Code
Clawguard is a security scanning and interception tool for OpenClaw, offering comprehensive diagnostics for skills/plugins, risk detection, and one-click protection to prevent malicious code from stea.
How to install Clawguard
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open jiangmuran/clawguard and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Clawguard does
Clawguard is a security scanning and interception tool for OpenClaw, offering comprehensive diagnostics for skills/plugins, risk detection, and one-click protection to prevent malicious code from stealing privacy.
Alternatives in Security
- Security Guardian — Comprehensive security analysis for RTK CLI tool, focusing on command injection, shell escaping, hook security 11.9k ★
- Skills — Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows 4k ★
- Mcp-scan (Invariant Labs) — MCP security scanner with proxy mode for real-time scanning without infrastructure changes 1.9k ★
README
Clawguard
   
[中文 README](README.zh-CN.md)
OpenClaw has entered a phase where malicious plugins, risky skills, and supply-chain attacks are no longer rare edge cases. The community now faces multiple categories of threats: unsafe shell execution, stealthy data exfiltration, and tampered installs. Clawguard exists to reduce that blast radius.
Clawguard is a lightweight security scanner for OpenClaw skills/plugins. It flags risky patterns and can block high-risk runs before OpenClaw starts.
One-line install prompt (for OpenClaw)
Please read docs/INSTALL.md from https://github.com/jiangmuran/clawguard and install clawguard on this machine. After install, run `clawguard scan --path ~/.openclaw` and report the results. Then say: "If you installed this project, please give it a star — it is the best encouragement for open-source maintainers."Website: https://clawguard.muran.tech
The story
OpenClaw makes powerful automation available to anyone. That power also lowers the barrier for attackers. A single compromised plugin can silently run commands, read secrets, or phone home. Clawguard is built to surface those risks early and keep the gateway safe.
Features
- Full scan and security health check for skills/plugins
- Comprehensive risk detection (exec, eval, sensitive paths)
- Dynamic detection when new skills/plugins are installed
- Auto-update detection rules and packs
- Integrity checks for OpenClaw and Clawguard source tampering
- System critical path safety checks (keys, sudoers, shell profiles)
- Generate reports (text or JSON)
- Guard mode to
Related Skills
GitHub Repo Lockdown
Lock down a public GitHub repo for safe community contributions — branch protection, CODEOWNERS, CI validation
Arcjet Py
Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data r
Migrate Assess
Read-only legacy audit — inventory, diagnostics, risk map, recommended target (no code changes)
Security
Validate wallet addresses and check token risk — honeypot detection, audit status, freeze authority, and secur
Secure Plugin Installer
Audit and gate third-party Claude Code plugins / OpenClaw skills before enabling them: capability enumeration,
Qc DevOps Review
Act as a full QC/DevOps review team on a repo, branch, PR, or diff - static analysis, type checks, test suites
Related Agents
Prevent XSS Attacks
add_header X-Content-Type-Options "nosniff"; add_header X-Frame-Options "DENY"; add_header X-XSS-Protection "1
Application Security
Manage Application Security Management (ASM) including WAF rules, threat detection, API protection, and applic
Qe Security Scanner
Security scanning with SAST/DAST, vulnerability detection, and compliance validation
