Security Guide

OpenClaw 安全部署指南 / Security deployment guide — help users secure their OpenClaw installation

139 stars 23 forksSecurity

Install

skills CLI (Claude Code, Cursor, Codex and more)
npx skills add jnMetaCode/shellward --skill security-guide
Manual install
git clone --depth 1 https://github.com/jnMetaCode/shellward.git /tmp/shellward
mkdir -p ~/.claude/skills
cp -r /tmp/shellward/skills/security-guide ~/.claude/skills/security-guide

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# ShellWard Security Deployment Guide / 安全部署指南

When the user invokes this skill, provide a complete security deployment checklist based on the following best practices. Check the current system state using available tools and give actionable recommendations.

## Security Checklist

### 1. Network Control / 网络控制
- Check if OpenClaw gateway port (19000/19001) is exposed to public network
- Recommend binding to 127.0.0.1 or using a reverse proxy with authentication
- Suggest firewall rules: `ufw allow from 127.0.0.1 to any port 19000`
- For cloud servers: check security group rules

### 2. Container Isolation / 容器隔离
- Recommend running OpenClaw in Docker with restricted capabilities:
  ```
  docker run --cap-drop=ALL --cap-add=NET_BIND_SERVICE \
    --read-only --tmpfs /tmp \
    -u 1000:1000 \
    openclaw
  ```
- Suggest resource limits: `--memory=2g --cpus=1`
- Mount only necessary directories

### 3. Credential Management / 凭证管理
- Scan for plaintext secrets in .env, .bashrc, environment variables
- Recommend using a secret manager (Vault, doppler, etc.)
- Check file permissions on sensitive files (should be 0600)
- Suggest `chmod 600 ~/.env ~/.ssh/* ~/.aws/credentials`

### 4. Audit Logging / 审计日志
- Verify ShellWard audit log is active at ~/.openclaw/shellward/audit.jsonl
- Show recent security events
- Recommend log rotation and backup strategy
- Suggest sending critical events to external SIEM

### 5. Plugin Security / 插件安全
Read the full skill on GitHub

Details

Skill name
security-guide
Repository
jnMetaCode/shellward
Path
skills/security-guide/SKILL.md
License
Apache-2.0
Repo updated
28 September 2026
Listed in
BehiSecc/awesome-claude-skills

FAQ

What does the Security Guide skill do?

OpenClaw 安全部署指南 / Security deployment guide — help users secure their OpenClaw installation

How do I install the Security Guide skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add jnMetaCode/shellward --skill security-guide. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is Security Guide popular?

It lives in jnMetaCode/shellward, which has 139 GitHub stars and 23 forks, and is included in 1 curated skill list.

Related skills

Claude Pentest Skills

66

frendysanusi/claude-pentest-skills

Structured web application penetration testing with OWASP methodology, curated payload references, 6-gate validation, and professional report generation

Security12

Find Bugs

1.1k

getsentry/skills

Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.

SecurityIn 1 list62

Auditor Skill

63

solanabr/auditor-skill

**AUDIT SKILL** — Comprehensive on-chain Solana program auditor and full-stack security review for ANY programming language. USE FOR: auditing Solana/Anchor programs, reviewing smart contract security, checking for vulnerabilities (missing signers, unchecked accounts, arithmetic overflow, CPI attacks, PDA confusion, type cosplay, reinitialization, flash loan exploits, MEV, governance backdoors, timelock bypass), auditing TypeScript/Python/Go/Java/Ruby/PHP/any language, backend/frontend code review, supply chain safety, CI/CD and GitHub Actions workflow security (comment-triggered commands, pul

Security13

VibeSec Skill

1.4k

BehiSecc/VibeSec-Skill

This skill helps Claude write secure web applications. Use this when working on any web application or when a user requests a scan or audit to ensure security best practices are followed.

SecurityIn 2 lists122

Malware Analysis

54

gl0bal01/malware-analysis-claude-skills

Orchestrate the complete malware analysis lifecycle across triage, dynamic analysis, detection engineering, and report writing. Use as the single entry point for any malware analysis task — routes to specialized sub-skills by file type and phase, carries findings between phases, and supports multi-sample batch workflows.

Security

Tirith

2.8k

sheeki03/tirith

Terminal security analysis for shell environments. This skill should be used when checking commands for supply-chain attacks before execution, scanning repositories for hidden content or config poisoning, scoring URLs for homograph attacks, setting up AI tool protection, inspecting Python package artifacts, governing untrusted tasks or Web3 commands, auditing browser extensions, creating provenance receipts, downloading and executing scripts safely, investigating why tirith blocked a command, managing trusted patterns, running security audits, configuring MCP gateway proxies, or working with t

Security104

Browse the most popular Claude skills, all security skills, or write your own with the skills generator.