| name | openclaw-self-guard |
| description | OpenClaw Security Vulnerability Monitor - Checks for OpenClaw security vulnerabilities from NVD CVE database and GitHub Security Advisories. Compares local OpenClaw version against known CVEs, outputs vulnerability details and remediation if found, otherwise runs silently. Auto-installs daily cron job. Data sources: NVD (nist.gov), GitHub Security Advisories. |
OpenClaw Self Guard - Security Vulnerability Monitor
Monitors OpenClaw for known security vulnerabilities by checking multiple threat intelligence sources.
Features
- Version Detection: Automatically detects local OpenClaw version
- CVE Monitoring: Checks NVD, GitHub Security Advisories for OpenClaw-related CVEs
- Smart Alerting: Outputs vulnerability details + remediation if found
- Silent Mode: Runs silently if no vulnerabilities found
- Auto Cron: Installs daily cron job (06:00 Beijing time) during skill setup
Data Sources
| Source | URL | Description |
|---|
| NVD | services.nvd.nist.gov | NIST National Vulnerability Database |
| GitHub Advisories | api.github.com/advisories | GitHub Security Advisory Database |
Usage
Run Manual Check
/openclaw 安全检查
/openclaw-self-guard check
View Current Version
/openclaw-self-guard version
Cron Job
Installed automatically during skill setup:
- Schedule: Daily at 06:00 (Beijing time)
- Behavior: Checks for vulnerabilities, reports if found
- Delivery: Console output only (no external channel by default)
To customize delivery channel, edit ~/.openclaw/cron/jobs.json after installation:
"delivery": {
"mode": "announce",
"channel": "feishu"
}
Output Format
When vulnerabilities found:
# 🔒 OpenClaw 安全漏洞报告
**检查时间**: 2026-03-31
**本地版本**: x.x.x
**检测到漏洞**: X 个
## 漏洞详情
| CVE ID | 严重性 | 描述 | 受影响版本 | 补救方案 |
When no vulnerabilities:
✅ OpenClaw v{x.x.x} - 未检测到安全漏洞
Skill Structure
openclaw-self-guard/
├── SKILL.md
├── scripts/
│ ├── check_vulns.py # Main vulnerability check
│ ├── fetch_nvd.py # Fetch CVE from NVD
│ ├── fetch_github.py # Fetch from GitHub
│ ├── get_version.py # Get local version
│ └── setup_cron.sh # Cron auto-installation
└── references/
└── requirements.txt
Notes
- Requires Python packages:
requests, beautifulsoup4, lxml
- Cron job auto-installs during skill setup
- No external channel by default - user configurable
