clawgears-securityaudit（Clawgears 安全审计） Skills下载安装命令和教程

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手，先确认命令和权限，再让它执行。

请帮我安装这个 Agent Skill：clawgears-securityaudit（Clawgears 安全审计）
来源仓库：https://github.com/jinhanai/clawgears-securityaudit
安装命令：
openclaw skills install clawgears-securityaudit
安装前请先检查当前环境是否支持对应 CLI，并向我确认将要执行的命令、安装目录、联网范围和文件读写权限；确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 OpenClaw 从第三方来源获取 Skill；本站只展示命令，不托管安装包，也不自动执行。

ClawHubOpenClaw

openclaw skills install clawgears-securityaudit

简介

对 macOS 上基于 OpenClaw 的 AI 助手进行安全审核，以检测暴露风险、弱令牌、敏感命令和 IP 泄漏。

SKILL.md

ClawGears Security Audit Skill

Overview

ClawGears is a security audit tool for OpenClaw/MoltBot/ClawdBot users on macOS. It helps detect and fix security vulnerabilities that could expose your AI assistant to the public internet.

🌟 New in v1.4.0: Context-Aware Risk Explanations

Instead of one-size-fits-all "best practices", ClawGears now provides scenario-based risk analysis:

Each check explains what it protects and real impact by scenario
Recommendations are graded: 🔴必须 / 🟠建议 / 🟡可选 / ⚪评估后决定
Legitimate reasons to not fix are acknowledged
Alternative compensating measures are suggested

Use this skill when:

User asks about OpenClaw security
User wants to check if their AI assistant is exposed
User mentions "裸奔" (Chinese), "むき出し" (Japanese), "expuesto" (Spanish) or security concerns
User wants to audit their OpenClaw configuration
User asks about IP leak detection

Supported Languages: ClawGears README is available in 7 languages:

🇬🇧 English | 🇨🇳 中文 | 🇩🇪 Deutsch | 🇫🇷 Français | 🇮🇹 Italiano | 🇯🇵 日本語 | 🇪🇸 Español

⚠️ Requirements & Dependencies

System Binaries Required

Binary	Purpose
`python3`	JSON parsing
`curl`	HTTP requests, IP detection
`lsof`	Port and process inspection
`pgrep` / `pkill`	Process management
`openssl`	Token generation
`socketfilterfw`	macOS firewall control (`/usr/libexec/ApplicationFirewall/socketfilterfw`)

Platform

macOS only - Uses macOS-specific tools and paths

📁 Files Accessed

Read Operations

Path	Purpose
`~/.openclaw/openclaw.json`	OpenClaw configuration (token, gateway settings)
`~/.openclaw/logs/`	Gateway logs for anomaly detection
`/Library/Application Support/com.apple.TCC/TCC.db`	macOS TCC database (Full Disk Access, Accessibility)
`~/Library/Application Support/com.apple.TCC/TCC.db`	User-level TCC database

Write Operations

Path	Purpose
`./history/`	Audit result storage (JSON, HTML reports)
`./reports/`	Generated audit reports
`~/.openclaw/openclaw.json`	Configuration fixes (with `--fix` flag only)

🌐 Network Calls

External Services (IP Detection)

Domain	Purpose	Data Sent
`api.ipify.org`	Public IP detection	None (GET request)
`icanhazip.com`	Public IP detection (fallback)	None
`ifconfig.me/ip`	Public IP detection (fallback)	None

External Services (Leak Detection)

Domain	Purpose	Data Sent
`openclaw.allegro.earth`	OpenClaw exposure database check	Your public IP
`search.censys.io`	Censys scan database (link only, manual check)	None from script
`www.shodan.io`	Shodan scan database (link only, manual check)	None from script

🔐 Privacy Notice

Before running this skill, please be aware:

IP Transmission: Your public IP address will be sent to:

- api.ipify.org (or fallback services) for IP detection - openclaw.allegro.earth for exposure database check

Local File Access: This skill reads:

- Your OpenClaw configuration (including tokens) - macOS TCC permission database - Gateway logs

System Changes: The interactive-fix.sh script can:

- Modify OpenClaw configuration - Generate new tokens - Restart Gateway service - Require sudo for firewall changes

Recommendation: Review scripts before running. Run quick-check.sh first (read-only) before applying any fixes.

Security Risks Explained

Use this section to understand each risk, its actual impact, and whether it applies to your situation.

Risk	What It Protects	Real Impact	Fix Priority
Gateway exposed	Prevent unauthorized access to your AI assistant	🔴 Critical - Anyone on the internet can control your AI. Fix immediately if exposed.	Weak token	Prevent API key theft	🟠 High - If leaked, attackers can impersonate you assistant and use your API keys. Fix recommended but token < 64 chars.	Sensitive commands	Prevent privacy invasion (camera, screenshots)	🟠 High - AI could these commands could spy on you or capture your screen. Fix recommended if not blocked.	FDA granted	Limit AI file access	🟡 Medium - AI can read all your files. Evaluate based on your trust level - Only enable if you truly need this capability. - Consider if your AI is running in a secure environment. - Alternative: Use project-specific folder permissions.	FileVault disabled	Protect data if disk is stolen	🟡 Medium - If Mac is stolen, all data is accessible. Evaluate based on your situation:

- ✅ Enable if Mac is portable or in shared spaces - ⚠️ OK to disable if you need remote restart control (e.g., for Mac-to-Mac sync) - If disabled, consider physical security measures instead | IP in leak database | Check if already exposed | 🟠 High - Your IP is in a public exposure database. Check before panicking: - If you've been using OpenClaw for a while without issues, it IP may have been indexed already. - If you just started, use the tool: do a quick check and not a leak. | iCloud sync enabled | Prevent sensitive data cloud sync | 🟡 Low - iCloud may sync Documents, Desktop, Pictures by default. Evaluate based on your needs: - ✅ Enable if you store sensitive data in these folders - ⚠️ OK to disable if you don't store sensitive data in these locations - If disabled, consider using .gitignore for excluding patterns | SIP disabled | Protect system integrity | 🟡 Low - System-level protections are reduced. **Usually OK to keep enabled, - Only disable if you have a specific, legitimate reason (e.g., development, testing) - If disabled, be extra cautious about what you install

Quick Security Check

Run a fast 5-second security audit (read-only, safe to run):

./scripts/quick-check.sh

This checks:

Gateway network exposure
Token strength
Command injection protection
TCC permissions
Firewall status

Full Security Audit

Run comprehensive security check:

./scripts/generate-report.sh --format html --output ./reports

IP Leak Detection

Check if user's IP has been exposed in security databases:

./scripts/ip-leak-check.sh --all

Checks 3 databases:

openclaw.allegro.earth - OpenClaw specific exposure database
Censys - Internet-wide scanning database (https://search.censys.io)
Shodan - IoT and service scanning database (https://www.shodan.io)

Interactive Fix

⚠️ Requires explicit user consent before running

Automatically fix common security issues:

./scripts/interactive-fix.sh

Options:

--bind - Rebind Gateway to localhost
--token - Generate new strong token
--deny - Add sensitive commands to deny list
--restart - Restart Gateway service
--all - Fix all issues

Workflow

When user asks about security:

First, run quick check to identify issues (read-only):

   ./scripts/quick-check.sh

If issues found, explain risks and ask for consent before fixing:

   ./scripts/interactive-fix.sh --all

Check IP exposure:

   ./scripts/ip-leak-check.sh --all

Generate report for records:

   ./scripts/generate-report.sh --format html

Output Interpretation

Quick Check Results

Symbol	Meaning
✅ PASS	Security check passed
⚠️ WARN	Warning, review recommended
❌ FAIL	Critical issue, fix immediately

IP Leak Results

Result	Action
IP NOT in database	Continue monitoring
IP FOUND in database	URGENT: Close public access, regenerate tokens

Important Reminders

Always recommend running quick check first (read-only, safe)
Explain risks in plain language before fixing
Ask for explicit consent before running interactive-fix.sh
Suggest periodic checks (weekly or after config changes)
Warn about the 220,000+ exposed OpenClaw instances

Statistics

Over 220,000 OpenClaw instances are publicly exposed. Many API keys have already leaked to hacker databases.

License

MIT-0 (ClawHub Platform License)

适合场景

01

OpenClaw 用户查找和安装 Skill 时

02

用户想查找某类 Agent Skill 时

03

需要根据任务场景推荐可安装能力包时

04

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明，方便继续核验

能力 4

补充不同宿主或平台的使用分布数据

能力 5

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用；具体调用方式请以来源页面和 README 为准。

平台分布

OpenClaw

98.26%

按下载量换算3,093

安全审计

VirusTotal

通过

ClawScan

通过

Static analysis

通过

权限和风险

敏感数据

该 Skill 可能接触密钥、Token、环境变量或敏感配置，应进入高风险复核队列，默认不自动发布。

安装前确认

本站仅展示第三方公开信息，不托管安装包，不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。当前只有一个来源，正式发布前建议补源仓库或其他目录站核验。

来源信息

GitHub 仓库

github.com

/jinhanai/clawgears-securityaudit

SKILL.md 来源

clawhub.ai