Whitzard-Claw

Whitzard-Claw is a security assistant used for OpenClaw, providing both TUI (Terminal User Interface) and WebUI (Web User Interface) for interactive security analysis.

Features

• 7 Security Categories: Network exposure, access control, execution sandboxing, credential storage, memory poisoning, supply chain, resource cost
• Real-time Progress: Live scanning progress in both TUI and WebUI
• Auto-fix Suggestions: Automated remediation scripts for detected vulnerabilities
• IOC Data Support: Customizable threat intelligence data files
• Dual Interface: Choose between terminal-based TUI or browser-based WebUI

Installation

Global Installation (Recommended)

npm install -g whitzard-claw

Local Installation

npm install whitzard-claw

From Source

git clone <repository-url>
cd whitzard-claw
npm install
npm run build
npm link

Usage

After installation, two commands are available:

TUI Mode (Terminal Interface)

whitzard-tui

Keyboard Shortcuts: | Key | Action | |-----|--------| | check + Enter | Start security scan | | ↑ / ↓ | Scroll through vulnerability list | | c | Enter selection mode | | Space | Toggle auto-fix options | | f | Execute selected fixes | | Esc | Exit selection mode |

WebUI Mode (Web Interface)

whitzard-webui

Then open your browser and visit: http://localhost:12340

Configuration

OPENCLAW_HOME Environment Variable

Set the path to your OpenClaw working directory:

export OPENCLAW_HOME=/path/to/your/openclaw

Alternatively, configure it in the WebUI settings page.

Default path: ~/.openclaw

Requirements

• Node.js: >= 18.0.0
• OS: Linux (Ubuntu/Debian recommended)
• Shell: Bash

Project Structure

whitzard-claw/
├── bin/              # CLI entry points
│   ├── whitzard-tui.js
│   └── whitzard-webui.js
├── dist/             # Compiled code
│   ├── tui/tui.js
│   └── webui/
├── ioc/              # IOC threat intelligence data
├── scripts/          # Scanning and remediation scripts
├── tui/              # TUI source code
└── webui/            # WebUI source code
    ├── index.html
    └── server.js

License

MIT License

Contributing

Contributions are welcome! Please feel free to submit issues and pull requests.

Acknowledgements

Whitzard-Claw is built upon the great work of the open-source security community. We would like to express our sincere gratitude to the following projects:

• openclaw-security-monitor
• secureclaw

Made with ❤️ for the security community