Clawvault Skill

该 Skill 为 OpenClaw 提供本地安全防护代理的安装与运维能力：通过 /clawvault 子命令完成安装、启动、健康检查、状态查询、规则生成、检测测试与卸载，支持从自然语言或预设场景生成检测规则，用于防范提示注入、凭据与 PII 泄露、危险命令执行和越狱尝试。检测在本地进行，仪表盘默认仅绑定本机。

Martin2877

热度 19.72

最近更新 2026-03-18 17:35:09

分类：安全依赖：代码执行 / 读写文件 / 第三方 API应用场景：自动化脚本 / DevOps / 工作流

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add clawvault-skill

Metadata

name: tophant-clawvault
version: 0.1.2
description: AI security system for protecting agents from prompt injection, data leakage, and dangerous commands
homepage: https://github.com/tophant-ai/ClawVault
user-invocable: true
disable-model-invocation: false

ClawVault Skill

AI security system for OpenClaw with installation, rule generation, detection, and monitoring.

Protection Against:

Prompt injection attacks
Data leakage (PII, credentials, API keys)
Dangerous command execution
Jailbreak attempts

Commands

/clawvault start

Start ClawVault services.

clawvault start                  # Default: localhost only (secure)
clawvault start --mode strict    # Strict mode

/clawvault install

Install ClawVault.

/clawvault install --mode quick     # Recommended
/clawvault install --mode standard  # Interactive
/clawvault install --mode advanced  # Full control

/clawvault health

Check service health and status.

/clawvault health

/clawvault generate-rule

Generate security rules from natural language.

/clawvault generate-rule "Block all AWS credentials"
/clawvault generate-rule --scenario customer_service --apply

Scenarios: customer_service, development, production, finance

/clawvault status

Get running status and statistics.

/clawvault status

/clawvault test

Run detection tests.

/clawvault test --category all
/clawvault test --category sensitive

Categories: all, sensitive, injection, commands

/clawvault uninstall

Remove ClawVault.

/clawvault uninstall
/clawvault uninstall --keep-config  # Keep configuration

Quick Examples

# Install
/clawvault install --mode quick

# Generate rule
/clawvault generate-rule "Detect database passwords" --apply

# Apply scenario
/clawvault generate-rule --scenario customer_service --apply

# Check health
/clawvault health

Requirements

Python 3.10+
Ports 8765, 8766 available

Permissions

execute_command - Run installation and ClawVault commands
write_files - Create configuration files
read_files - Read configurations
network - Download packages and API calls

Security Considerations

⚠️ Important: ClawVault operates as a local HTTP proxy that inspects AI traffic.

What This Means:

ClawVault can see API requests, responses, and API keys
This is intentional and necessary for threat detection
All data stays on your local machine

Dashboard Security:

Default: Binds to 127.0.0.1 (localhost only) ✅ Secure
For remote access: Use SSH tunneling instead of exposing dashboard
Example: ssh -L 8766:localhost:8766 user@server

Before Installing:

Review the SECURITY.md documentation
Understand that ClawVault will inspect all proxied traffic
Ensure dashboard binding is appropriate for your environment
Consider running in isolated environment for sensitive use cases

For Production:

Use localhost-only dashboard
Enable strict mode: --mode strict
Configure audit log retention
Review detection logs regularly

See SECURITY.md for complete security documentation.

Documentation

Full Guide: https://github.com/tophant-ai/ClawVault/blob/main/doc/OPENCLAW_SKILL.md
中文文档: https://github.com/tophant-ai/ClawVault/blob/main/doc/zh/OPENCLAW_SKILL.md
Repository: https://github.com/tophant-ai/ClawVault