tophant-clawvault-installer

Installs and manages the ClawVault local proxy for inspecting AI agent traffic.

1.1k|38|Updated Mar 8, 2026
One-click install
npx skills add https://github.com/tophant-ai/ClawVault --skill tophant-clawvault-installer
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tophant-clawvault-installer
Source: https://github.com/tophant-ai/ClawVault/tree/main/skills/tophant-clawvault-installer
Command: npx skills add https://github.com/tophant-ai/ClawVault --skill tophant-clawvault-installer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyyaml.

What problem does it solve?

AI agents can leak API keys, PII, and credentials or fall victim to prompt injection and dangerous commands, and users lack visibility into that traffic. This Skill installs and manages ClawVault, a local HTTPS-inspection proxy that monitors and controls AI agent requests.

Core Features & Use Cases

  • Guided installation: Sets up ClawVault in a dedicated virtualenv at ~/.clawvault-env with quick, standard, or advanced modes, plus OpenClaw gateway proxy integration.
  • Rule generation and testing: Creates security rules from natural language or scenario templates (customer_service, development, production, finance) and runs built-in detection test suites.
  • Health monitoring and lifecycle management: Checks proxy and dashboard status on ports 8765/8766, removes proxy configuration, and fully uninstalls when needed.
  • Use Case: A developer worried about leaking AWS credentials through an AI coding agent installs ClawVault, applies the development scenario, and reviews blocked requests in the local dashboard.

Quick Start

Ask the agent to install ClawVault in quick mode with the OpenClaw plugin and then run a health check to confirm the proxy and dashboard are running.

Frequently Asked Questions about tophant-clawvault-installer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I install ClawVault for OpenClaw?

Run the bundled clawvault_manager.py script with the install command, for example: python3 clawvault_manager.py install --mode quick --install-plugin. It creates a virtualenv at ~/.clawvault-env, installs ClawVault from GitHub, writes config, and starts the proxy and dashboard.

How do I generate security rules from natural language?

Use the generate-rule command with a policy description, such as generate-rule "Block all AWS credentials" --apply. You can also apply prebuilt scenario templates like customer_service, development, production, or finance.

Does ClawVault see my API keys and prompts?

Yes. ClawVault is a local MITM inspection proxy, so it decrypts and inspects HTTPS requests including API keys and prompt content. All data stays on your local machine in ~/.ClawVault, and nothing is uploaded externally.

Why does OpenClaw hang or disconnect after installing the proxy?

Restarting openclaw-gateway after proxy injection can cause recent OpenClaw versions to disconnect or hang. The installer avoids restarting the gateway by default; if problems occur, run the unconfigure-proxy command to remove the injected proxy environment variables.

What are the limitations of the ClawVault dashboard security?

The dashboard has no authentication and binds to 127.0.0.1 by default, which is safe for local use. Never expose it with --dashboard-host 0.0.0.0 on untrusted networks; use SSH tunneling for remote access instead.