aliyun-clawscan

# aliyun-clawscan

Comprehensive OpenClaw security assessment combining configuration audit and skill security analysis.

---

## When to Use

| Scenario | Example Triggers |
|----------|------------------|
| Full Assessment | `OpenClaw安全评估`, `风险评估`, `安全体检` |
| Config Audit | `配置审计`, `检查OpenClaw配置` |
| Skill Scan | `skill安全扫描`, `检查skill风险` |
| Pre-install Check | `安装前检查`, `这个skill安全吗` |

---

## Assessment Workflow

```
Step 1: Configuration Audit
  └─ openclaw security audit --deep
     └─ See: reference/baseline.md

Step 2: Skill Security Audit
  ├─ Inventory: openclaw skills list
  └─ Static Analysis (local rules)
     └─ See: reference/skillaudit.md

Step 3: Consolidated Report
  └─ Overview + findings
```

---

# Step 1: Configuration Audit

Run OpenClaw built-in security audit:

```bash
openclaw security audit --deep
```

Parse results into categories (Gateway, Network, Tools, Browser, Files, Room).

**Reference:** `reference/baseline.md` for detailed check categories and parsing rules.

---

# Step 2: Skill Security Audit

## Phase 1: Inventory

```bash
openclaw skills list
```

## Phase 2: Static Analysis

Apply local detection rules across 11 categories:

| Category | Severity | Reference |
|----------|----------|-----------|
| Reverse Shell / Backdoor | 🚨 Critical | skillaudit.md Scenario 1 |
| Credential Harvesting | 🚨 Critical | skillaudit.md Scenario 2 |
| Data Exfiltration | 🔴 High | skillaudit.md Scenario 3 |
| Cryptominer | 🚨 Critical | skillaudit.md Scenario 4 |
| Permission Abuse | 🔴 High | skillaudit.md Scenario 5 |
| Prompt Injection | 🔴 High | skillaudit.md Scenario 6 |
| Code Obfuscation | 🟡 Medium | skillaudit.md Scenario 7 |
| Ransomware | 🚨 Critical | skillaudit.md Scenario 8 |
| Persistence | 🟡 Medium | skillaudit.md Scenario 9 |
| Supply Chain | 🟡 Medium | skillaudit.md Scenario 10 |
| **Malicious Service Downloader** | 🚨 Critical | skillaudit.md Scenario 11 |

**Reference:** `reference/skil...