Openclaw Security Guard

---

name: openclaw-security-guard description: Security audit CLI + live dashboard for OpenClaw. Scans for secrets, config issues, prompt injections, vulnerable dependencies, and unverified MCP servers. Zero telemetry. version: 1.0.0 metadata: openclaw: requires: bins: - node install: - kind: node package: openclaw-security-guard bins: [openclaw-guard, openclaw-security-guard] emoji: "\U0001F6E1" homepage: https://github.com/2pidata/openclaw-security-guard os: - macos - linux - windows

---

OpenClaw Security Guard

The missing security layer for your OpenClaw installation.

What it does

Run openclaw-guard audit to scan your OpenClaw setup across 5 categories:

Secrets Scanner -- Detects API keys, tokens, passwords across 15+ formats + entropy analysis

Config Auditor -- Checks sandbox mode, DM policy, gateway binding, rate limiting

Prompt Injection Detector -- 50+ patterns: instruction overrides, role hijacking, jailbreaks

Dependency Scanner -- npm CVE scanning

MCP Server Auditor -- Allowlist-based verification of installed MCP servers

Quick start

npm install -g openclaw-security-guard
Full audit
openclaw-guard audit
Fix issues automatically (with backup)
openclaw-guard fix --auto
Launch live dashboard
openclaw-guard dashboard

Features

Security Score (0-100) -- one number for your security posture

Auto-hardening -- interactive, automatic, or dry-run modes

Live dashboard -- real-time monitoring at localhost:18790

Pre-commit hooks -- catch secrets before they're committed

Multi-language -- English, French, Arabic

Zero telemetry -- no tracking, no network requests, 100% local

Links

Repository: https://github.com/2pidata/openclaw-security-guard

Author: Miloud Belarebia / 2PiData

License: MIT