test123asdzcv1.1.6

Before installing a new skill from an untrusted registry, edgeone-clawscan audits the skill for supply chain risks, known vulnerabilities, and suspicious code patterns. The user triggers this by saying 'scan this skill' or 'check skill safety' during installation.

Periodic full security health check of the OpenClaw environment, auditing installed skills, misconfigurations, and CVE advisories. Triggered by commands like '开始安全体检' or 'perform security audit'.

With AIG_CLOUD_LOOKUP=off, the skill performs a pure local audit without any outbound HTTPS requests. Suitable for high-security or air-gapped environments where even minimal data transmission is prohibited.

When a user suspects a skill was tampered with after installation, they can run a deep audit to compare signatures and detect anomalies. Uses the live probe command 'openclaw security audit --deep' for network-based verification against the local Gateway.

In a multi-tenant OpenClaw deployment, the skill scans each tenant's installed skills for policy violations and security risks, ensuring compliance with organizational security standards.

Offer basic local scanning for free, with premium features like enhanced cloud threat intelligence, advanced CVE databases, and priority support under a subscription model.

Bundle edgeone-clawscan as a premium add-on to existing OpenClaw enterprise subscriptions, providing automated security auditing as a value-added service.

Provide a self-hosted version of the A.I.G API to enterprises that require full control over their threat intelligence data, sold as a licensed software appliance.