Yapie0Yapie0Community·60 Agent Skills Included

safe-openclaw

Security-hardened OpenClaw gateway with encrypted credentials and sandboxing

Secures self-hosted OpenClaw gateways with mandatory password authentication, AES-256-GCM encrypted API keys, and salted password hashing. Blocks dangerous commands, redacts leaked secrets in chat, and sandboxes subprocess execution on macOS and Linux. Adds policy-based filesystem, network, and command allowlists plus audit logging, so agents run safely on servers without exposing keys or host files.
npx skills add Yapie0/safe-openclaw --all -g -y
Available:

Tells the agent how this security-hardened fork is structured, which files implement the auth and encryption layers, and which build, test, and gateway commands to use when working in the repo.

All Skills in This Repository (60)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install safe-openclaw?

Run `npx skills add Yapie0/safe-openclaw --all -g -y` in your terminal to install all skills in this suite globally.

How is safe-openclaw different from openclaw?

It adds a mandatory password login gate, SHA-256 password hashing, AES-256-GCM encryption for API keys, secret redaction in messages, and OS-level sandboxing for commands the agent runs.

Does safe-openclaw protect my API keys?

Yes. All model API keys are encrypted with AES-256-GCM using a key derived from your password, and outbound messages are scanned to redact any leaked tokens or credentials.

Can it block dangerous commands from the agent?

Yes. The built-in Security Shield blocks destructive commands like rm -rf and reverse shells, while Execution Isolation enforces filesystem, network, and command allowlists.

Do I need to change my existing openclaw setup?

No. It is a drop-in replacement that keeps your existing config, sessions, and channels while applying all security patches on top.

Related Repositories in Software Engineering

View All in Software Engineering