munnam77

Awesome Openclaw Security

Name: Awesome Openclaw Security
Author: munnam77

Security community

SOURCE https://github.com/munnam77/awesome-openclaw-security

Description

Security hardening guide, malicious skill scanner, and production configs for OpenClaw. Stop deploying naked.

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

awesome-openclaw-security

**Stop deploying OpenClaw naked. 30,000+ instances are exposed right now. Don't be one of them.**

A comprehensive security hardening guide, toolkit, and malicious skill scanner for [OpenClaw](https://github.com/openclaw/openclaw) -- the open-source personal AI assistant with 280k+ GitHub stars and a massive security crisis.

Quick Start: Scan Your Skills in 30 Seconds

git clone https://github.com/munnam77/awesome-openclaw-security.git
cd awesome-openclaw-security
python3 scanner/scan.py --path /path/to/your/openclaw/skills

Want to see it in action first? Run the demo:

python3 scanner/scan.py --demo

Example output

========================================================
  OpenClaw Skill Security Scanner v1.0.0
  Scanning: scanner/demo/
========================================================

[FAIL] malicious-skill.js
  CRITICAL: 5 malicious indicator(s) detected
  - Matched known malicious pattern: Node.js Reverse Shell
  - Matched known malicious pattern: AWS Credential Theft
  - Matched known malicious pattern: Crontab/LaunchAgent Persistence
  - Line 78: Arbitrary code execution via eval/exec/compile
  - Line 68: Shell command execution via child_process (Node.js)

[PASS]