Skill: jzming9/shieldclaw (version 1.0.4)

--- name: shieldclaw description: "Security suite for OpenClaw. Provides security scanning, real-time protection, audit logging, and sensitive data encryption. Use this skill when users need security-related operations, threat detection, or data protection." metadata: emoji: "🛡️" requires: {} --- # ShieldClaw Security Suite ## Overview ShieldClaw is a security skill suite for OpenClaw, providing four core capabilities: - **Scan** - Security scanning - **Guard** - Real-time protection - **Audit** - Audit logging - **Vault** - Sensitive data encryption ## Usage Scenarios ### 1. Security Scan (Scan) Perform security checks before installing or using a Skill. **Users might say:** - "Scan this Skill for security issues" - "Check if ~/projects/my-skill is safe" - "Are there any risks in Skills in this directory" - "Scan all Skills in the current directory" **Capabilities:** - Detect dangerous function calls - Discover hardcoded keys/passwords - Evaluate permission risks - Identify suspicious network requests - Provide risk score (0-100) ### 2. Real-time Guard (Guard) Monitor and intercept suspicious file/network/process operations. **Users might say:** - "Enable file protection" - "Protect ~/.ssh directory from access" - "Block access to sensitive files" - "View protection interception records" - "Add /data/secrets to protection list" **Capabilities:** - File system monitoring - Network request interception - Process execution control - Real-time alerts ### 3. Data Vault (Vault) Encrypt and securely store sensitive data, with auto-detection and masking. **Users might say:** - "Encrypt this API Key" - "Store this password for me" - "Securely store this private key" - "Mask sensitive data in this text" - "View my saved sensitive data" **Capabilities:** - AES-256-GCM encryption - Auto-detect sensitive information (phone, ID, email, etc.) - Smart masking display - System keychain for key storage ### 4. Security Audit (Audit) Record operation logs and generate security reports. **Users might say:** - "Generate security report" - "View recent security events" - "Export audit logs" - "View intercepted suspicious operations" - "What security risks this month" **Capabilities:** - Complete operation audit trail - Visualized reports - PDF/Excel export - Compliance checking ## Configuration ShieldClaw supports the following configuration options: | Option | Description | Default | |--------|-------------|---------| | scan.enabled | Enable scanning | true | | scan.autoScanOnInstall | Auto-scan on install | true | | guard.enabled | Enable protection | true | | guard.strictMode | Strict mode (more sensitive) | false | | guard.sensitivePaths | Protected paths list | ["~/.ssh", "~/.aws"] | | audit.enabled | Enable audit | true | | audit.retentionDays | Log retention days | 180 | | vault.enabled | Enable encryption | true | ## Security Recommendations 1. **Scan before install**: Scan all third-party Skills before installation 2. **Encrypt sensitive data**: Use Vault for passwords, API Keys, private keys 3. **Protect critical directories**: Enable Guard for SSH keys, AWS credentials 4. **Regular audits**: Review security reports and audit logs regularly ## Notes - Encryption keys are auto-managed in system keychain - Audit logs stored in local SQLite database - Some advanced features may require manual configuration - Supports Windows, macOS, Linux platforms


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)