Automates security audits for OpenClaw gateway by checking key configuration settings to identify and report common security risks.
自动化安全审计配置工具，检测 OpenClaw 网关常见安全配置问题。
node {baseDir}/scripts/audit.cjs
~/.openclaw/openclaw.jsonopenclaw security audit --deep| 配置项 | 不安全值 | 安全值 |
|---|---|---|
| gateway.bind | 0.0.0.0 | 127.0.0.1 |
| gateway.auth.token | 短或默认 | 32位强随机 |
| controlUi.allowInsecureAuth | true | false |
| tools.exec.security | full | allowlist |
| tools.exec.ask | off | on-miss |
ZIP package — ready to use