Asosiy tarkibga o'tish

​
openclaw security

Xavfsizlik vositalari (audit va ixtiyoriy tuzatishlar). Bog‘liq:
  • openclaw sessions

​
Audit

openclaw security audit
openclaw security audit --deep
openclaw security audit --fix
The audit warns when multiple DM senders share the main session and recommends secure DM mode: session.dmScope="per-channel-peer" (or per-account-channel-peer for multi-account channels) for shared inboxes. It also warns when small models (<=300B) are used without sandboxing and with web/browser tools enabled. Webhook ingress uchun, hooks.defaultSessionKey o‘rnatilmagan bo‘lsa, so‘rovdagi sessionKey override’lari yoqilgan bo‘lsa yoki override’lar hooks.allowedSessionKeyPrefixes siz yoqilgan bo‘lsa ogohlantiradi. Shuningdek, sandbox rejimi o‘chiq bo‘lsa-da sandbox Docker sozlamalari o‘rnatilganida, gateway.nodes.denyCommands samarasiz pattern-ga o‘xshash yoki noma’lum yozuvlardan foydalanganda, global tools.profile="minimal" agent tool profillari tomonidan bekor qilinganda hamda o‘rnatilgan extension plugin toollari permissiv tool siyosati ostida mavjud bo‘lishi mumkin bo‘lsa ogohlantiradi.