Skill: pfaria32/openclaw-shield (version 1.0.3)

# OpenClaw Shield Enterprise security scanner for AI agents. Detects credential theft, data exfiltration, and malicious code with static analysis + runtime guards + ClamAV integration. Audit logging and tamper-evident reports. **When to use:** Security scanning, threat detection, code auditing, runtime protection for AI agents **What to know:** **Repository:** https://github.com/pfaria32/OpenClaw-Shield-Security ## Features ### Static Scanner - Detects credential theft, data exfiltration, destructive operations - Pattern-based analysis (no external dependencies) - Python stdlib only (zero supply chain risk) - Pre-execution scanning ### Runtime Guard - File/network/exec allowlists - Output sanitization - Policy enforcement - Real-time protection ### Integration - ClamAV integration (3.6M virus signatures) - Telegram alerting on critical findings - Hash-chained audit logging - Tamper-evident security logs ## Installation ```bash cd /home/node/.openclaw/workspace git clone https://github.com/pfaria32/OpenClaw-Shield-Security.git projects/OpenClaw-Shield # Test the scanner python3 projects/OpenClaw-Shield/src/scanner.py /path/to/scan # Deploy (see repository README for full setup) ``` ## Usage ### Manual Scan ```bash python3 projects/OpenClaw-Shield/src/scanner.py workspace --output shield-report.json ``` ### Daily Automated Scans Set up cron job (see repository deployment guide): ```bash # Daily at 3 AM UTC 0 3 * * * /path/to/scan-script.sh ``` ### Runtime Guard (Optional) Configure allowlists and enable runtime protection (see deployment/openclaw-config.py in repo). ## Status ✅ **Deployed** on this instance (clawdbot-toronto) - Daily scans: 3:00 AM UTC - ClamAV: Active (host-level) - Runtime guard: Prepared (not enabled by default) ## Attribution **Inspired by:** Resonant by Manolo Remiddi **Source:** https://github.com/ManoloRemiddi/resonantos-open-system-toolkit/blob/main/BUILD_YOUR_OWN_SHIELD.md Built on the principle: "Don't trust, verify." ## Documentation Full docs, threat model, and deployment guide in repository README.

path: README.md
content: # OpenClaw Shield

Enterprise security scanner for AI agents. Detects credential theft, data exfiltration, and malicious code with static analysis + runtime guards + ClamAV integration. Audit logging and tamper-evident reports.

## Features

- Static code scanner with pattern-based threat detection
- Runtime guard with file/network/exec allowlists
- ClamAV integration (3.6M virus signatures)
- Hash-chained audit logging
- Zero supply chain risk (Python stdlib only)

## Installation

```bash
clawhub install openclaw-shield
```

## Repository

https://github.com/pfaria32/OpenClaw-Shield-Security

## License

MIT


path: SECURITY.md
content: # Security Notice - OpenClaw Shield

## Purpose

OpenClaw Shield is a **SECURITY SCANNER** designed to DETECT threats in AI agent code. It is NOT malicious software.

## Why This Tool Contains Security-Related Patterns

This repository contains:
- ✅ **Pattern definitions** for detecting credential theft, data exfiltration, and malicious code
- ✅ **Example threat signatures** used to identify dangerous operations
- ✅ **Detection logic** that scans OTHER code for security issues

**This is equivalent to antivirus signature databases** - they contain descriptions of threats to DETECT them, not to execute them.

## What This Tool Does NOT Do

❌ **Does NOT contain exploits** - No actual malicious code  
❌ **Does NOT steal credentials** - Detects when OTHER code tries to  
❌ **Does NOT exfiltrate data** - Detects when OTHER code tries to  
❌ **Does NOT run malicious operations** - Scans for them in target code

## What This Tool DOES Do

✅ **Scans Python code** for security threats using pattern matching  
✅ **Identifies suspicious operations** like credential access + network calls  
✅ **Generates security reports** in JSON format  
✅ **Prevents execution** of flagged code through allowlist enforcement  
✅ **Logs audit trails** with tamper-evident hashing

## Safe Usage

```bash
# Scan a directory for threats
python3 src/scanner.py /path/to/scan --output report.json

# Review the report
cat report.json

# Take action based on findings
```

## False Positive Explanation

Automated security tools may flag this repository because:

1. **Pattern definitions look like threats** - We define patterns like `ANTHROPIC_API_KEY` to DETECT when other code accesses them
2. **References to sensitive paths** - We check if code accesses `~/.ssh/`, `~/.aws/` to FLAG suspicious behavior
3. **Network + credential correlation** - We detect when code reads secrets AND makes network calls

**This is detection logic, not attack logic.**

## Comparison

| Tool | Contains Threat Patterns? | Malicious? |
|------|---------------------------|------------|
| ClamAV virus database | ✅ Yes (millions) | ❌ No - it's antivirus |
| Snort IDS signatures | ✅ Yes (thousands) | ❌ No - it's intrusion detection |
| **OpenClaw Shield** | ✅ Yes (dozens) | ❌ No - it's a code scanner |

## Responsible Disclosure

If you find an actual security vulnerability (not a false positive from our detection patterns):
- Report via GitHub Issues: https://github.com/pfaria32/OpenClaw-Shield-Security/issues
- Or email: [REDACTED_SECRET] (if configured)

## Verification

To verify this tool's safety:
1. ✅ Read the source code: `src/scanner.py` (Python stdlib only, no external dependencies)
2. ✅ Review pattern definitions: Lines contain regex patterns for DETECTION
3. ✅ Check for network calls: None in scanner code itself
4. ✅ Inspect git history: No hidden exploits or obfuscated code

## License & Disclaimer

MIT License - Provided "AS IS" with NO WARRANTIES.

**Use responsibly:** This is a security tool. Audit code before deploying. The scanner can only detect known patterns - it's not a substitute for human security review.

---

**TL;DR:** This is a security scanner that contains threat DETECTION patterns, not threat EXECUTION code. Like antivirus software, it describes threats to identify them.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)