openclaw-security-patrolOpenClaw 多模式安全巡检工具:默认本地离线扫描,可选联网威胁情报上报。 功能范围:读取系统敏感信息(MAC 地址、主机名、系统日志、完整 Skill 清单)执行本地安全检测;在本机持久化保存扫描报告与安全基线;可选通过 --push 模式将摘要数据上传至 auth.ctct.cn 获取威胁情报评分(需用户...
Install via ClawdBot CLI:
clawdbot install zsyjx0115/openclaw-security-patrolGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdAccesses system directories or attempts privilege escalation
/etc/cronCalls external URL not in known-safe list
https://auth.ctct.cn:10020/changeway-open/api/pushAuditDataAI Analysis
The skill's default offline mode performs extensive local system reconnaissance (MAC, hostname, full skill list, logs) and persistent storage, which is intrusive but local. However, the optional '--push' mode sends this sensitive fingerprinting data (including a persistent agent_id) to an external server controlled by the skill's developer, creating a significant privacy risk if users are not fully informed. While the skill documents this and requires explicit consent, the data collection scope and potential for long-term device profiling are substantial.
Generated Mar 21, 2026
适用于企业IT部门定期进行内部安全合规检查,验证系统配置是否符合安全基线。通过本地模式扫描系统日志、进程和网络状态,生成合规报告供内部审计使用,无需数据外传满足严格隐私要求。
帮助软件开发者和安全工程师评估个人开发环境的安全性。扫描本地技能清单和系统配置,识别潜在安全风险,特别适合隐私敏感的技术人员使用离线模式进行自我安全审计。
适用于需要外部威胁情报支持的安全团队。在用户明确同意后,通过完整检测模式将设备指纹和技能清单上传至Changeway服务,获取威胁评分和历史安全档案,实现持续的安全态势评估。
为系统管理员提供定时自动化安全检查能力。通过openclaw cron设置每日巡检任务,在本地离线模式下自动运行,生成安全报告,实现持续的安全监控而不依赖人工干预。
基础本地扫描功能免费提供,吸引用户建立使用习惯。通过完整检测模式提供增值威胁情报服务,可能采用按扫描次数或订阅制收费,为企业用户提供深度安全分析服务。
通过agent_id建立设备历史安全档案,提供跨时间的安全趋势分析。为组织提供设备安全评分、风险预警和合规报告,帮助企业管理者了解整体安全状况并制定改进策略。
利用收集的技能清单数据,分析不同技能组合的安全风险。为技能开发者提供安全认证服务,为用户推荐安全技能组合,构建基于安全评级的技能生态系统。
💬 Integration Tip
确保Node.js v18+环境正确配置,首次使用需仔细阅读隐私说明并根据实际需求选择本地或联网模式。
Scored Jun 19, 2026
Audited Apr 18, 2026 · audit v1.0
Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with the npm-installed clawdhub CLI.
Mission control dashboard for OpenClaw - real-time session monitoring, LLM usage tracking, cost intelligence, and system vitals. View all your AI agents in o...
Transcribe YouTube videos to text by extracting captions and subtitles directly from the video URL using yt-dlp without audio processing.
Manage a self-hosted Trello-like board via `wekancli`. Create, move and archive cards, lists and boards on a WeKan server. Use when user asks about task boar...
Proactive security monitoring, threat scanning, and auto-remediation for OpenClaw deployments
Create or improve SOUL.md files for OpenClaw agents through guided conversation. Use when designing agent personality, crafting a soul, or saying "help me create a soul". Supports self-improvement.