# Send OpenClaw Security Hardening to your agent Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually. ## Fast path - Download the package from Yavira. - Extract it into a folder your agent can access. - Paste one of the prompts below and point your agent at the extracted folder. ## Suggested prompts ### New install ```text I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete. ``` ### Upgrade existing ```text I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run. ``` ## Machine-readable fields ```json { "schemaVersion": "1.0", "item": { "slug": "openclaw-security-hardening", "name": "OpenClaw Security Hardening", "source": "tencent", "type": "skill", "category": "效率提升", "sourceUrl": "https://clawhub.ai/kylejfrost/openclaw-security-hardening", "canonicalUrl": "https://clawhub.ai/kylejfrost/openclaw-security-hardening", "targetPlatform": "OpenClaw" }, "install": { "downloadUrl": "/downloads/openclaw-security-hardening", "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=openclaw-security-hardening", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "packageFormat": "ZIP package", "primaryDoc": "SKILL.md", "includedAssets": [ "SKILL.md", "assets/security-rules-template.md", "scripts/audit-outbound.sh", "scripts/harden-workspace.sh", "scripts/install-guard.sh", "scripts/integrity-check.sh" ], "downloadMode": "redirect", "sourceHealth": { "source": "tencent", "status": "healthy", "reason": "direct_download_ok", "recommendedAction": "download", "checkedAt": "2026-04-23T16:43:11.935Z", "expiresAt": "2026-04-30T16:43:11.935Z", "httpStatus": 200, "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=4claw-imageboard", "contentType": "application/zip", "probeMethod": "head", "details": { "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=4claw-imageboard", "contentDisposition": "attachment; filename=\"4claw-imageboard-1.0.1.zip\"", "redirectLocation": null, "bodySnippet": null }, "scope": "source", "summary": "Source download looks usable.", "detail": "Yavira can redirect you to the upstream package for this source.", "primaryActionLabel": "Download for OpenClaw", "primaryActionHref": "/downloads/openclaw-security-hardening" }, "validation": { "installChecklist": [ "Use the Yavira download entry.", "Review SKILL.md after the package is downloaded.", "Confirm the extracted package contains the expected setup assets." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] } }, "links": { "detailUrl": "https://openagent3.xyz/skills/openclaw-security-hardening", "downloadUrl": "https://openagent3.xyz/downloads/openclaw-security-hardening", "agentUrl": "https://openagent3.xyz/skills/openclaw-security-hardening/agent", "manifestUrl": "https://openagent3.xyz/skills/openclaw-security-hardening/agent.json", "briefUrl": "https://openagent3.xyz/skills/openclaw-security-hardening/agent.md" } } ``` ## Documentation ### OpenClaw Security Hardening A comprehensive security toolkit for protecting OpenClaw installations from attacks via malicious skill files, prompt injection, data exfiltration, and workspace tampering. ### Threat Model This skill protects against: ThreatDescriptionToolPrompt InjectionMalicious skills containing instructions to override system prompts, ignore safety rules, or manipulate agent behaviorscan-skills.shData ExfiltrationSkills that instruct the agent to send sensitive data (credentials, memory, config) to external endpointsaudit-outbound.shSkill TamperingUnauthorized modification of installed skills after initial reviewintegrity-check.shWorkspace ExposureSensitive files with wrong permissions, missing .gitignore rules, insecure gateway configharden-workspace.shSupply ChainInstalling a new skill that contains hidden malicious patternsinstall-guard.sh ### Quick Start # Run a full security scan of all installed skills ./scripts/scan-skills.sh # Audit outbound data flow patterns ./scripts/audit-outbound.sh # Initialize integrity baseline ./scripts/integrity-check.sh --init # Harden your workspace ./scripts/harden-workspace.sh --fix # Check a new skill before installing ./scripts/install-guard.sh /path/to/new-skill/ ### 1. scan-skills.sh — Skill File Scanner Scans all installed skill files for malicious patterns including prompt injection, data exfiltration attempts, suspicious URLs, hidden unicode, obfuscated commands, and social engineering. Usage: # Scan all skill directories ./scripts/scan-skills.sh # Scan a specific directory only ./scripts/scan-skills.sh --path /path/to/skills/ # Output as JSON for automation ./scripts/scan-skills.sh --json # Show help ./scripts/scan-skills.sh --help What it detects: Prompt injection patterns (override instructions, new system prompts, admin overrides) Data exfiltration (curl/wget to external URLs, sending file contents) Suspicious URLs (webhooks, pastebin, requestbin, ngrok, etc.) Base64-encoded content that could hide instructions Hidden unicode characters (zero-width spaces, RTL override, homoglyphs) References to sensitive files (.env, credentials, API keys, tokens) Instructions to modify system files (AGENTS.md, SOUL.md) Obfuscated commands (hex encoded, unicode escaped) Social engineering ("don't tell the user", "secretly", "without mentioning") Severity levels: 🔴 CRITICAL — Likely malicious, immediate action needed 🟡 WARNING — Suspicious, review manually 🔵 INFO — Noteworthy but probably benign ### 2. integrity-check.sh — Skill Integrity Monitor Creates SHA256 hash baselines of all skill files and detects unauthorized modifications. Usage: # Initialize baseline (first run) ./scripts/integrity-check.sh --init # Check for changes (run periodically) ./scripts/integrity-check.sh # Update baseline after reviewing changes ./scripts/integrity-check.sh --update # Check specific directory ./scripts/integrity-check.sh --path /path/to/skills/ # Show help ./scripts/integrity-check.sh --help Reports: ✅ Unchanged files ⚠️ Modified files (hash mismatch) 🆕 New files (not in baseline) ❌ Removed files (in baseline but missing) Automation: Add to your heartbeat or cron to run daily: # In HEARTBEAT.md or cron 0 8 * * * /path/to/scripts/integrity-check.sh 2>&1 | grep -E '(MODIFIED|NEW|REMOVED)' ### 3. audit-outbound.sh — Outbound Data Flow Auditor Scans skill files for patterns that could cause data to leave your machine. Usage: # Audit all skills ./scripts/audit-outbound.sh # Audit specific directory ./scripts/audit-outbound.sh --path /path/to/skills/ # Show whitelisted domains ./scripts/audit-outbound.sh --show-whitelist # Add domain to whitelist ./scripts/audit-outbound.sh --whitelist example.com # Show help ./scripts/audit-outbound.sh --help Detects: HTTP/HTTPS URLs embedded in skill instructions References to curl, wget, fetch, web_fetch, browser navigate Email/message/webhook sending instructions Raw IP addresses in instructions Non-whitelisted external domains ### 4. harden-workspace.sh — Workspace Hardener Checks and fixes common security misconfigurations in your OpenClaw workspace. Usage: # Check only (report issues) ./scripts/harden-workspace.sh # Auto-fix safe issues ./scripts/harden-workspace.sh --fix # Show help ./scripts/harden-workspace.sh --help Checks: File permissions on sensitive files (MEMORY.md, USER.md, SOUL.md, credentials) .gitignore coverage for sensitive patterns Gateway auth configuration DM policy settings Sensitive content in version-controlled files ### 5. install-guard.sh — Pre-Install Security Gate Run before installing any new skill to check for malicious content. Usage: # Check a skill before installing ./scripts/install-guard.sh /path/to/new-skill/ # Strict mode (fail on warnings too) ./scripts/install-guard.sh --strict /path/to/new-skill/ # Show help ./scripts/install-guard.sh --help Checks: All patterns from scan-skills.sh Dangerous shell patterns in scripts (rm -rf, curl|bash, eval, etc.) Suspicious npm dependencies (if package.json exists) Exit code 0 = safe, 1 = suspicious (for CI/automation) ### Security Rules Template Copy assets/security-rules-template.md into your AGENTS.md to add runtime security rules for your agent. These rules instruct the agent to refuse prompt injection attempts and protect sensitive data. cat assets/security-rules-template.md >> /path/to/AGENTS.md ### Recommended Setup Initial setup: ./scripts/scan-skills.sh # Scan existing skills ./scripts/audit-outbound.sh # Audit outbound patterns ./scripts/integrity-check.sh --init # Create baseline ./scripts/harden-workspace.sh --fix # Fix workspace issues Add security rules to AGENTS.md from the template Before installing new skills: ./scripts/install-guard.sh /path/to/new-skill/ Periodic checks (add to heartbeat or cron): ./scripts/integrity-check.sh # Detect tampering ./scripts/scan-skills.sh # Re-scan for new patterns ## Trust - Source: tencent - Verification: Indexed source record - Publisher: kylejfrost - Version: 1.1.0 ## Source health - Status: healthy - Source download looks usable. - Yavira can redirect you to the upstream package for this source. - Health scope: source - Reason: direct_download_ok - Checked at: 2026-04-23T16:43:11.935Z - Expires at: 2026-04-30T16:43:11.935Z - Recommended action: Download for OpenClaw ## Links - [Detail page](https://openagent3.xyz/skills/openclaw-security-hardening) - [Send to Agent page](https://openagent3.xyz/skills/openclaw-security-hardening/agent) - [JSON manifest](https://openagent3.xyz/skills/openclaw-security-hardening/agent.json) - [Markdown brief](https://openagent3.xyz/skills/openclaw-security-hardening/agent.md) - [Download page](https://openagent3.xyz/downloads/openclaw-security-hardening)