alibabacloud-sas-openclaw-securityPerform security operations on OpenClaw environments by calling Alibaba Cloud Security Center (SAS) and ECS APIs via the aliyun CLI. Supports asset queries,...
Install via ClawdBot CLI:
clawdbot install sdk-team/alibabacloud-sas-openclaw-securityGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdPotentially destructive shell commands in tool definitions
rm -rf /Accesses system directories or attempts privilege escalation
/etc/cronCalls external URL not in known-safe list
https://help.aliyun.com/zh/cli/installationGenerated Oct 8, 2026
Security operations teams run the skill daily to query OpenClaw instances, aggregate vulnerability, baseline, and alert findings, and generate a security daily report. It reduces manual console checks and surfaces critical risks quickly.
When an alert fires on an OpenClaw host, responders use the skill to verify the instance, run diagnostics via Cloud Assistant, and push remediation checks. This enables fast containment without switching between consoles.
Compliance teams query baseline check results and drill into specific risk items to prove adherence to internal standards or regulations. The skill outputs actionable summaries for audit evidence and remediation tracking.
MSSPs deploy the skill per customer account to monitor OpenClaw assets, handle alerts, and install security guardrails at scale. It standardizes responses across tenants and automates evidence collection for reports.
DevOps engineers integrate the skill into post-deployment pipelines to trigger vulnerability scans and baseline checks on new OpenClaw instances. It ensures security verification before workloads serve production traffic.
A subscription service where experts use the skill to continuously monitor, triage, and remediate OpenClaw security issues on behalf of customers. It replaces the need for in-house 24/7 security teams with a predictable monthly fee.
One-time or periodic engagements where the provider runs deep vulnerability, baseline, and alert analyses and delivers a formal security report. The skill automates data gathering, allowing consultants to focus on interpretation and recommendations.
Customers pay a retainer for guaranteed rapid response during security incidents. The provider uses the skill to execute emergency commands, isolate compromised hosts, and guide recovery, reducing breach impact and downtime.
💬 Integration Tip
Ensure the aliyun CLI is updated to at least 3.3.3 with auto-plugin-install enabled, and use a dedicated RAM role with minimal permissions as described in references/ram-policies.md. Always include the required --user-agent flag for proper tracking.
Scored Jul 11, 2026
Audited Apr 17, 2026 · audit v1.0
Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with the npm-installed clawdhub CLI.
Transcribe YouTube videos to text by extracting captions and subtitles directly from the video URL using yt-dlp without audio processing.
Proactive security monitoring, threat scanning, and auto-remediation for OpenClaw deployments
Create or improve SOUL.md files for OpenClaw agents through guided conversation. Use when designing agent personality, crafting a soul, or saying "help me create a soul". Supports self-improvement.
macOS Gateway 24/7 watchdog with 4-layer health checks and auto-repair. Monitors: L1 process alive, L2 HTTP port, L3 WebSocket communication (1006 detection)...
Run ClawHub skill release workflows with clear safety gates. Use for publish, inspect, update, sync, and failure recovery with command-first steps, explicit...