What is security-guide?

A security deployment guide for OpenClaw, with instructions in English and Chinese. It covers network exposure, container isolation, credentials, permissions, and audit logging.

Use it to review an OpenClaw installation, check gateway access, restrict containers and network traffic, protect credentials, set file permissions, and improve audit logs.

It provides concrete checks for common deployment risks, such as exposing an administration port or storing secrets in plain text. It also suggests safer container and firewall settings.

security-guide — Skill for Claude Code by jnMetaCode/shellward

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add jnMetaCode/shellward --skill security-guide

Clone the repo

git clone --depth 1 https://github.com/jnMetaCode/shellward

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/jnmetacode/shellward/security-guide/github.svg)](https://agentmods.dev/skills/jnmetacode/shellward/security-guide)

Your own site

<a href="https://agentmods.dev/skills/jnmetacode/shellward/security-guide"><img src="https://agentmods.dev/badge/skills/jnmetacode/shellward/security-guide/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/jnmetacode/shellward/security-guide"><img src="https://agentmods.dev/badge/skills/jnmetacode/shellward/security-guide.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 23 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 628 The whole file, excluding the scripts and references it only reads on demand.

Security scan B 2 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00023	$0.00628
Opus 5.5	$0.00009	$0.00251
Sonnet 5.5	$0.00005	$0.00126
Haiku 4.5	$0.00002	$0.00063

Measured 1mo ago against content hash 5f5098b6d3c0, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

security-guide scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootlowPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

- Suggest `chmod 600 ~/.env ~/.ssh/* ~/.aws/credentials`

Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.

Reaches for credential filesmediumPrivilege escalation

SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.

- Suggest `chmod 600 ~/.env ~/.ssh/* ~/.aws/credentials`

Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.

skills/security-guide/SKILL.md · 69 lines

How it starts

The opening of the file, as written. The whole thing — 69 lines — stays where its author put it; the contents beside it link to each section on GitHub.

ShellWard Security Deployment Guide / 安全部署指南

When the user invokes this skill, provide a complete security deployment checklist based on the following best practices. Check the current system state using available tools and give actionable recommendations.

Security Checklist

1. Network Control / 网络控制

Check if OpenClaw gateway port (19000/19001) is exposed to public network
Recommend binding to 127.0.0.1 or using a reverse proxy with authentication
Suggest firewall rules: ufw allow from 127.0.0.1 to any port 19000
For cloud servers: check security group rules

2. Container Isolation / 容器隔离

Recommend running OpenClaw in Docker with restricted capabilities:

docker run --cap-drop=ALL --cap-add=NET_BIND_SERVICE \
  --read-only --tmpfs /tmp \
  -u 1000:1000 \
  openclaw

Suggest resource limits: --memory=2g --cpus=1
Mount only necessary directories

3. Credential Management / 凭证管理

Scan for plaintext secrets in .env, .bashrc, environment variables
Recommend using a secret manager (Vault, doppler, etc.)
Check file permissions on sensitive files (should be 0600)
Suggest chmod 600 ~/.env ~/.ssh/* ~/.aws/credentials

4. Audit Logging / 审计日志

Verify ShellWard audit log is active at ~/.openclaw/shellward/audit.jsonl
Show recent security events
Recommend log rotation and backup strategy
Suggest sending critical events to external SIEM

5. Plugin Security / 插件安全

List all installed plugins and check for known risks
Disable auto-update for plugins
Only install from trusted sources
Scan plugin code for suspicious patterns

6. Patch Management / 补丁管理

Check current OpenClaw version
Report known vulnerabilities for current version
Recommend upgrade path
Check Node.js version (must be >= 22.12)

Available Commands

Remind the user about ShellWard's quick commands:

/security — Full security status overview
/audit [count] [filter] — View audit log
/harden — Scan for issues, /harden fix to auto-fix
/scan-plugins — Scan plugins for security risks
/check-updates — Check versions and vulnerabilities

Read the full file on GitHub · 69 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago First seen · 69 lines · 23 tokens per session scan B 5f5098b6d3c0

Subscribe to this mod's changes

security-guide is a skill published in the GitHub repository jnMetaCode/shellward (140 stars, last pushed 18d ago), licensed Apache-2.0. It adds 23 tokens to every session and 628 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it B with 2 findings (asks for root, reaches for credential files). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Prompt Injection Security ai-agent ai-security llm-security openclaw

clinical-trial-protocol-skill

Generate clinical trial protocols for medical devices or drugs. This skill should be used when users say "Create a clinical trial protocol", "Generate protocol for [device/drug]", "Help me design a clinical study", "Research similar trials for [intervention]", or when developing FDA submission documentation for…

Agent-Threat-Rule/agent-threat-rules · 70 tokens

claude-d3js-skill

This skill provides guidance for creating sophisticated, interactive data visualisations using d3.js.

Agent-Threat-Rule/agent-threat-rules · 25 tokens

adr-skill

Create and maintain Architecture Decision Records (ADRs) optimized for agentic coding workflows. Use when you need to propose, write, update, accept/reject, deprecate, or supersede an ADR; bootstrap an adr folder and index; consult existing ADRs before implementing changes; or enforce ADR conventions. This skill uses…

Agent-Threat-Rule/agent-threat-rules · 89 tokens

terraform-skill

Terraform infrastructure as code best practices.

Agent-Threat-Rule/agent-threat-rules · 10 tokens

create-auth-skill

Scaffold and implement authentication in TypeScript/JavaScript apps using Better Auth. Detect frameworks, configure database adapters, set up route handlers, add OAuth providers, and create auth UI pages. Use when users want to add login, sign-up, or authentication to a new or existing project with Better Auth.

Agent-Threat-Rule/agent-threat-rules · 66 tokens

prior-auth-review-skill

Automate payer review of prior authorization (PA) requests. This skill should be used when users say "Review this PA request", "Process prior authorization for [procedure]", "Assess medical necessity", "Generate PA decision", or when processing clinical documentation for coverage policy validation and authorization…

Agent-Threat-Rule/agent-threat-rules · 63 tokens

security-guide