openclaw-security-hardening

Files (7)

• CHANGELOG.md
• README.md
• SKILL.md
• _meta.json
• SOUL-config-example.md · examples/
• pre-submit-check.sh · tests/
• security-test.sh · tests/

SKILL.md (first lines)

# OpenClaw Security Hardening

**Complete Security Framework** - Protects OpenClaw agents from **data leaks** (static security) and **prompt injection** (runtime security).

## Overview

This skill provides **comprehensive security protection** for OpenClaw agents:

1. **Static Security** - Protect data at rest
   - File permissions (chmod 600)
   - Sensitive data isolation (.env files)
   - Git protection (.gitignore)
   - Automated monitoring (security-check.sh)

2. **Dynamic Security** - Prevent runtime attacks
   - Content vs Intent detection
   - Three-Question Test
   - Dangerous command recognition
   - Safe execution patterns

**When to use:**
- ✅ Initial OpenClaw setup
- ✅ Security audits
- ✅ After discovering vulnerabilities
- ✅ Regular maintenance (weekly)
- ✅ When users ask about security

---

## Part 1: Static Security (Data Protection)

### The Problem

**Sensitive data in clear text**:
```markdown
# MEMORY.md
- **App Secret**: your_app_secret_here
- **API Key**: sk-xxxxxx
```

**Risks**:
- Other users on multi-user systems can read files (644 permission)
- Malware can access WSL2 filesystem
- Accidental Git commits to public repos
- Cloud backup uploads (OneDrive, etc.)
- Temporary files forgotten and not cleaned

---

### Solution: Multi-Layer Protection

#### Layer 1: File System Permissions

**Problem**:
```bash
-rw-r--r-- 1 yc yc  MEMORY.md  # 644 - others can read
```

**Fix**:
```bash
chmod 600 ~/.openclaw/workspace/*.md
-rw------- 1 yc yc  MEMORY.md  # 600 - only you can read
```

**Core files to protect**:
```bash
MEMORY.md       # Your long-term memory
USER.md         # Information about you
SOUL.md         # Agent persona
TOOLS.md        # Environment-specific notes
.env            # Sensitive data (create this)
```

---

#### Layer 2: Data Isolation (.env files)

**Create .env file**:
```bash
cat > ~/.openclaw/workspace/.env << 'EOF'
# OpenClaw Environment Variables
# SENSITIVE DATA - Do not share or commit to Git

# Feishu Configuration
FEISHU_APP_ID=your_app_id_here
FEISHU_APP_SECRET=your_app_secret_here
FEISHU_APP_TOKEN=your_token_here
FEISHU_TABLE_ID=your_table_id_here

# API Endpoints
USER_REGISTER_API=https://your-api-endpoint-here

# Add other sensitive info here
EOF
```

**Set secure permissions**:
```bash
chmod 600 ~/.openclaw/workspace/.env
```

**Update MEMORY.md**:
```markdown
### 飞书应用配置
- **App ID**: your_app_id_here
- **App Secret**: 见.env文件（FEISHU_APP_SECRET）
- **用户注册接口**: 见.env文件（USER_REGISTER_API）
```

**Benefits**:
- Clear boundary: sensitive data in one place
- Easy to protect: .env can be separately encrypted
- Safe to share: MEMORY.md can be shared safely

---

#### Layer 3: Git Protection

**Add to .gitignore**:

From LeoYeAI/openclaw-master-skills, MIT.

More from LeoYeAI/openclaw-master-skills