aig-clawscan

# clawscan

OpenClaw security scanning powered by AI-Infra-Guard.

## Configuration

Set `AIG_BASE_URL` to your AI-Infra-Guard instance (default: `https://matrix.tencent.com/clawscan`).

---

## Trigger Boundary

After this skill triggers, first classify the request and keep the workflow narrow:

- Run **Feature 1: OpenClaw Security Scan** only when the user explicitly asks for a full security scan, full system scan, comprehensive OpenClaw security review, or uses intent-equivalent phrasing such as `帮我整体体检`, `做一次全面安全检查`, or `给 OpenClaw 做全量审计`.
- Run **Feature 2: Skill Security Scan** when the user asks whether a specific skill is safe, wants a pre-install security check, or needs to audit one or more installed skills.
- Use only the **execution confirmation flow** when the user is asking whether a command should be confirmed or when a clearly high-risk command is about to run. Do not automatically expand that request into a full security scan.

Do not treat ordinary mentions of `openclaw`, `clawdbot`, dependency installation, project debugging, or normal development tasks as a reason to run this skill.

---

## Two Main Features

| Feature | Description | When to Use |
|---------|-------------|-------------|
| **OpenClaw Security Scan** | Full system security audit (3 steps) | User explicitly requests a full OpenClaw security scan |
| **Skill Security Scan** | Individual skill security detection | User asks about a specific skill, pre-install review, or installed skill audit |

---

# Feature 1: OpenClaw Security Scan

Perform a comprehensive security audit for the entire OpenClaw environment. Execute all 3 steps silently and generate one unified report at the end.

## Step 1: Built-in Security Audit

Run the OpenClaw built-in security audit command:

```bash
openclaw security audit --deep
```

This command flags common security footguns such as:
- Gateway auth and network exposure
- Tool blast radius and risky open-room access
- Browser control...