ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Stiff-Sec — OpenClaw Security Hardener

v1.0.0

Audit and securely harden OpenClaw setups by enforcing strict permissions, disabling elevated access, fixing proxy warnings, and backing up configs automatic...

⭐ 0· 91·0 current·0 all-time
by@sf-dev-systems

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for sf-dev-systems/stiff-sec.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Stiff-Sec — OpenClaw Security Hardener" (sf-dev-systems/stiff-sec) from ClawHub.
Skill page: https://clawhub.ai/sf-dev-systems/stiff-sec
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install stiff-sec

ClawHub CLI

Package manager switcher

npx clawhub@latest install stiff-sec
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
ℹ
Purpose & Capability
The declared purpose (audit and harden OpenClaw configs) matches the files: both scripts operate on ~/.openclaw/openclaw.json and create backups. That capability is coherent with the name and description.
!
Instruction Scope
SKILL.md/README claim features that are not implemented or are implemented inconsistently: README and SKILL.md claim a SHA-256 tamper-detecting lockfile and detailed MEMORY.md logging, but scripts do not write a SHA-256 to .stiffened nor update MEMORY.md. SKILL.md says it will 'restrict file permissions to current user only' and set certain fields (dnsResultOrder, tools.exec.ask), but stiffen.py does not change file permissions or set exec.ask/dnsResultOrder. audit.py prints partial secret previews (reads plaintext values), which could leak sensitive substrings into logs; it only scans openclaw.json and does not exfiltrate, but the outputs reveal secrets to whoever runs it.
✓
Install Mechanism
No install spec — instruction-only with bundled scripts. No network downloads or package installs are performed by the skill itself.
✓
Credentials
No environment variables, credentials, or external endpoints are requested. The scripts only read/write files under ~/.openclaw and create a .stiffened lockfile in the current working directory.
ℹ
Persistence & Privilege
The skill is not always-enabled and does not modify other skills or global agent settings. It does write backups to ~/.openclaw/backups and writes .stiffened in the current working directory; these are reasonable for a hardening tool but are persistent filesystem changes the user should expect.
What to consider before installing
This skill will modify your ~/.openclaw/openclaw.json when you run 'apply' (it creates a backup first). However, several claimed safeguards are missing or broken: the tool advertises writing a SHA‑256 to .stiffened for tamper detection but stiffen.py only writes a human-readable .stiffened without any hash, so verify-checking will report 'No SHA-256 found'. The code also does not actually change filesystem permissions despite claiming to do so, and it may not set some fields the README promises. Before running 'apply': (1) manually inspect the two scripts (already included) and confirm the exact mutations; (2) copy a separate manual backup of ~/.openclaw/openclaw.json to an external safe location; (3) run 'audit' first to see findings and note that audit prints secret previews to stdout (avoid running in a place where logs are exposed); (4) consider running stiffen.py in a sandbox or test environment to observe behavior and validate restore works. If you plan to trust this skill long-term, ask the maintainer to fix the inconsistencies (compute and store SHA‑256 in .stiffened, implement permission tightening, and ensure paths used for .stiffened are predictable).

Like a lobster shell, security has layers — review code before you run it.

latestvk97dm5nz6e7p3cbv27fkwmk3zx83rn15
91downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0
@sf-dev-systems
latest
Download

AgentSkill: Stiff-Sec (Hex-Stiff Hardener) 🛡️

Audit and aggressively harden OpenClaw setups. Built by OniBoniBot (👹🐰).

Why Stiff-Sec?

Generic auditors just "tell" you there's a problem. Stiff-Sec (the Hex-Stiff) slams the door, locks the vault, and hardens your OpenClaw setup against prying eyes.

Our Backup Policy (Sienna's Protocol)

  • Always Backup First: Before any config change, we create a timestamped backup in ~/.openclaw/backups/.
  • Undo Strategy: Any change can be reversed with stiff-sec restore.
  • Explain Everything: Every edit is logged in MEMORY.md with a specific "Undo" instruction.

Audit Logic (scripts/audit.py)

  • Scan openclaw.json for plaintext keys or overly permissive endpoints.
  • Check file permissions on MEMORY.md and workspace files.
  • Verify allowed_origins and allowed_agents in the gateway config.
  • Scan for exposed node_modules or .git directories in the workspace.

Stiffening Routine (scripts/stiffen.py)

  • Backup: Creates openclaw.json.[timestamp].bak.
  • Hardening:
    • Restrict file permissions to current user only.
    • Enable dnsResultOrder: "ipv4first" for stability.
    • Set elevated: { enabled: false } or ask: always on all tools.
    • Fix proxy warnings by setting gateway.trustedProxies: ["127.0.0.1"].
  • Create a .stiffened lockfile to mark the secure perimeter.

Usage

  • stiff-sec audit — Returns a risk report.
  • stiff-sec apply — Executes the stiffening routine + backups.
  • stiff-sec restore — Reverts to the last known good backup.

Comments

Loading comments...