ClawPosture

Security posture and visibility for OpenClaw. Scan your environment, see a posture score, high-risk agents, and actionable findings.

Install

npm install -g clawposture

Or run without installing:

npx clawposture scan ~/.openclaw

Usage

clawposture scan [path] [options]

| Flag | Description | |------|-------------| | --json | Output report as JSON | | --output=<path> | Write JSON to file (use with --json) | | --summary | Short output: score + riskiest agents only | | --fail-on-high | Exit 1 if any CRITICAL or HIGH findings (CI-ready) | | --agent <name> | Filter findings to a single agent | | --state-dir=<path> | Use this state directory | | --sample | Show example output (preview only; not a real scan) |

Examples

clawposture scan
clawposture scan ~/.openclaw --json --output=report.json
clawposture scan --fail-on-high
clawposture scan --agent main
clawposture scan --sample    # Preview example output (no OpenClaw required)

Requirements

ClawPosture scans an OpenClaw state directory (default: ~/.openclaw or OPENCLAW_STATE_DIR). If none is found, it will show what to do. Use --sample to see example output without OpenClaw.

Trust

• Read-only: Only reads config and file metadata. No prompts, no execution, no data sent off-machine.
• No telemetry: We do not collect usage data.

Links

• npm package