Here's Openclaw Carapace, a CLI security scanner for OpenClaw. It audits your configs, flags CVEs, and scans skill files for vulnerabilities.
A few things it does:
- Auto-fix common misconfigurations
- Hardening profiles for typical deployment patterns
- SARIF output so it drops right into GitHub Code Scanning or your CI/CD pipeline
Would love feedback — especially on what checks or hardening rules you'd want to see next.
A few things it does: - Auto-fix common misconfigurations - Hardening profiles for typical deployment patterns - SARIF output so it drops right into GitHub Code Scanning or your CI/CD pipeline
Would love feedback — especially on what checks or hardening rules you'd want to see next.