slowmist/openclaw-security-practice-guide

Registry 信息

项目简介

专为OpenClaw系统自身设计的安全实践指南，侧重于面向代理的安全强化，而非传统仅供人类使用的检查清单。

要点

• 面向代理的安全指南
• OpenClaw专用强化实践
• 基于Shell的实现

使用场景

• 保护OpenClaw部署
• 实施代理安全措施
• 遵循AI系统安全最佳实践

README 摘要

# OpenClaw Security Practice Guide [](https://github.com/openclaw/openclaw) [](https://opensource.org/licenses/MIT) [](#) *Read this in other languages: [English](README.md), [简体中文](README_zh-CN.md).* A definitive security practice guide designed specifically for **High-Privilege Autonomous AI Agents** (OpenClaw). It shifts the paradigm from traditional "host-based static defense" to "Agentic Zero-Trust Architecture", effectively mitigating risks like destructive operations, prompt injection, supply chain poisoning, and high-risk business logic execution. ⚠️Before you start playing, please read the disclaimer and FAQ at the bottom.<br> ⚠️Before you start playing, please read the disclaimer and FAQ at the bottom.<br> ⚠️Before you start playing, please read the disclaimer and FAQ at the bottom. ## 🎯 Scope, Scenario & Core Principles > **This guide is designed for OpenClaw itself (Agent-facing), not as a traditional human-only hardening checklist.** > In practice, you can send this guide directly to OpenClaw in chat, let it evaluate reliability, and deploy the defense matrix with minimal manual setup. > **Important boundary:** This guide does **not** make OpenClaw “fully secure.” > Security is a complex systems engineering problem, and absolute security does not exist. > This guide is built for a specific threat model, scenario, and operating assumptions. > **Final responsibility and last-resort judgment remain with the human operator.** ### Target Scenario - OpenClaw runs with high privileges (terminal/root-capable environment) - OpenClaw contin

话题

暂无话题