openclaw-guard

Security plugin for OpenClaw that blocks dangerous shell commands before execution.

Install

openclaw plugins install @virtue-ai/openclaw-guard

Config

In your OpenClaw config:

{
  "plugins": {
    "openclaw-guard": {
      "enabled": true,
      "strictMode": false,
      "allowedPaths": ["/tmp"],
      "customPatterns": []
    }
  }
}

| Option | Default | Description | |--------|---------|-------------| | enabled | true | Enable/disable the plugin | | strictMode | false | Block medium severity commands (git push --force, etc.) | | allowedPaths | [] | Paths where high severity commands are allowed | | customPatterns | [] | Additional regex patterns to block |

Blocked Commands

Critical (always blocked):

• rm -rf /, rm -rf ~/
• mkfs.*, dd of=/dev/*
• Fork bombs, shutdown, reboot

High (blocked by default):

• chmod 777 /, curl | bash
• iptables -F, crontab -r

Medium (strictMode only):

• git push --force, git reset --hard
• DROP DATABASE, docker system prune

Development

npm install
npm test
npm run build

License

MIT