Security Checks Reference

Clawkeeper runs 55 automated security checks across 4 phases. This page is auto-generated from the check definitions in the source code.

Host Hardening (18)Network (6)Prerequisites (7)Security Audit (24)

Host Hardening

18 checks

ID	Name	Platform	Description	Sudo	Auto-fix
linux_user_account	User Account	linux	OpenClaw should run under a non-root user to limit blast radius.	sudo	no
siri	Siri	macos	Siri indexes files, contacts, and app activity locally.	-	yes
linux_ssh_hardening	SSH Hardening	linux	SSH is the primary attack surface on a VPS. Hardening is critical.	sudo	yes
location_services	Location Services	macos	Location data embeds in file metadata that OpenClaw might process or transmit.	sudo	yes
bluetooth	Bluetooth	macos	Unnecessary radio interface. Exposes the machine to proximity-based attacks.	sudo	yes
linux_firewall	Firewall (UFW)	linux	A firewall limits inbound access to only the ports you need.	sudo	yes
airdrop	AirDrop & Handoff	macos	Both create network-discoverable services. AirDrop makes this machine visible nearby.	-	yes
linux_auto_updates	Automatic Security Updates	linux	Servers should auto-install security patches to prevent known exploits.	sudo	yes
analytics	Analytics & Telemetry	macos	Diagnostic data from this machine shouldn't go to Apple or third parties.	sudo	yes
linux_fail2ban	Fail2ban	linux	Blocks IPs after repeated failed login attempts.	sudo	yes
linux_unnecessary_services	Unnecessary Services	linux	Reducing running services minimizes the attack surface.	sudo	yes
spotlight	Spotlight Indexing	macos	Spotlight indexes file contents and metadata. Reduces what's queryable by a compromised agent.	sudo	yes
firewall	macOS Firewall	macos	Host-level firewall provides defense in depth beyond network isolation.	sudo	yes
linux_disk_encryption	Disk Encryption	linux	Protects data at rest if the server disk is accessed outside the VM.	-	no
filevault	FileVault (Full-Disk Encryption)	macos	Protects data at rest if the machine is physically compromised.	-	no
admin_user	User Account	macos	OpenClaw should run under a standard (non-admin) user to limit blast radius.	sudo	no
icloud	iCloud	macos	iCloud syncs data off-device. A compromised agent's files shouldn't trigger cloud uploads.	-	no
automatic_login	Automatic Login	macos	Automatic login bypasses the login screen — anyone with physical access gets in.	sudo	yes

Network

6 checks

ID	Name	Platform	Description	Sudo	Auto-fix
linux_network	Network Configuration	linux	Reviews network interfaces and connectivity.	-	no
network_isolation	Network Isolation	macos	Verifies this machine is on an isolated network, not your primary Wi-Fi.	-	no
linux_open_ports	Open Ports Audit	linux	Only essential ports should be listening on external interfaces.	-	no
screen_sharing	Screen Sharing	macos	Screen Sharing should only be enabled if you access this Mac remotely.	-	no
remote_login	Remote Login	macos	SSH is useful for managing this machine remotely. Verify it is intentional.	-	no
mdns_bonjour	mDNS / Bonjour (OpenClaw Discovery)	macos	OpenClaw can broadcast its presence via mDNS. This should be disabled.	-	no

Prerequisites

7 checks

ID	Name	Platform	Description	Sudo	Auto-fix
homebrew	Homebrew	macos	Package manager needed for installing Docker, Node.js, and other tools.	-	yes
linux_essentials	Essential Packages	linux	Checks for git, curl, openssl, and ca-certificates.	sudo	yes
linux_node	Node.js	linux	OpenClaw requires Node.js 22 or higher.	sudo	yes
node	Node.js	macos	OpenClaw requires Node.js 22 or higher.	-	yes
docker_installed	Docker Desktop	macos	Container isolation is the most impactful security improvement for OpenClaw.	-	yes
linux_docker	Docker Engine	linux	Docker provides container isolation for OpenClaw.	sudo	yes
native_openclaw	OpenClaw (npm)	macos	Checks if OpenClaw is available via npm global install or npx.	-	yes

Security Audit

24 checks

ID	Name	Platform	Description	Sudo	Auto-fix
openclaw_version	OpenClaw Version & CVE Check	all	Checks installed OpenClaw version against known CVEs (gateway auth bypass, 1-click RCE, WebSocket token leak).	-	no
cve_audit	OpenClaw CVE Audit	all	Fetches the live OpenClaw CVE feed and checks installed version against known vulnerabilities with remediation guidance.	-	no
nanoclaw_running	NanoClaw Instance Detection	all	Detects running NanoClaw instances via processes, containers, and channel connections.	-	no
openclaw_running	OpenClaw Instance Detection	all	Detects running OpenClaw instances via Docker containers, processes, and port 18789 binding.	-	no
nanoclaw_config	NanoClaw Mount Allowlist Audit	all	Audits ~/.config/nanoclaw/mount-allowlist.json for permissions, blocked paths, and security settings.	-	yes
openclaw_config	OpenClaw Configuration Audit	all	Audits ~/.openclaw directory and openclaw.json for permissions, gateway binding, auth, discovery, and credential exposure.	-	yes
nanoclaw_hardening	NanoClaw Container Hardening	all	Audits NanoClaw container security: non-root user, capabilities, resource limits, read-only rootfs.	-	no
openclaw_hardening	OpenClaw Hardening Audit	all	Advanced configuration checks: sandbox mode, exec host policy, DM scope/policy, filesystem restriction, log redaction.	-	no
env_file	.env File Security	all	Checks .env file permissions in common OpenClaw installation locations.	-	yes
nanoclaw_credentials	NanoClaw Credential Security	all	Verifies NanoClaw credential isolation: env var exposure, CLAUDE.md secrets, session credential safety.	-	yes
credential_exposure	Credential Exposure Scan	all	Scans config files, shell history, MEMORY.md, and session logs for exposed credentials. Also detects prompt injection in MEMORY.md (poisoned instructions, base64, invisible Unicode, C2 callbacks) and session transcripts (jailbreak phrases, encoded payloads).	-	no
nanoclaw_network	NanoClaw Network Egress	linux	Checks for network egress restrictions on NanoClaw containers. Warns about unrestricted outbound access (known vulnerability).	sudo	no
nanoclaw_channels	NanoClaw Channel Security	all	Verifies NanoClaw channel authentication: WhatsApp, Telegram, Slack, Discord credential security.	-	no
skills_security	Skills Security Audit	all	Scans skills directories for dangerous install commands, secret injection, data exfiltration patterns, prompt-level attack instructions, companion hook file analysis, file integrity drift detection, and openclaw.json skills config audit.	-	yes
session_commands	Session Rogue Commands	all	Scans session JSONL files for suspicious bash commands executed by AI agents — detects data exfiltration (curl POST, wget), reverse shells, base64-to-shell execution, privilege escalation (chmod 777, setuid), sensitive file access (/etc/shadow, authorized_keys), download-and-execute patterns, environment variable dumping, and history clearing.	-	no
soul_security	SOUL.md Security Audit	all	Checks SOUL.md permissions, sensitive data, prompt injection patterns, base64, unicode, and file size.	-	yes
container_security	Container Security Audit	all	Audits running OpenClaw Docker container for user, capabilities, privileged mode, network, resource limits, and volume mounts.	-	no
gateway_advanced	Gateway Advanced Security	all	Checks elevated tool access, browser control, group access policy, plugin allowlist, and trusted proxy configuration.	-	no
credential_store	Credential Store Security	all	Checks permissions on credential directories, OAuth profiles, session transcript stores, and log files. Content-scans log files for leaked credentials and exploitation patterns.	-	yes
nemoclaw_installed	NemoClaw Installation Detection	all	Detects NemoClaw installation via Python package, config directory, and running processes.	-	no
nemoclaw_guardrails	NemoClaw Guardrails Configuration	all	Audits NeMo Guardrails config.yml for input rails, output rails, jailbreak detection, and PII masking.	-	no
nemoclaw_audit_logs	NemoClaw Audit Logging	all	Verifies NemoClaw audit logging is enabled for compliance and security monitoring.	-	no
nemoclaw_permissions	NemoClaw Permissions & RBAC	all	Verifies NemoClaw role-based access control, tool permissions, and privilege separation.	-	no
nemoclaw_pii_masking	NemoClaw PII Protection	all	Verifies NemoClaw PII detection and masking configuration for compliance (GDPR, HIPAA, SOC2).	-	no