Security
6 ClawDocx posts in Security: OpenClaw and Claude Code guides, tips and analysis, newest first.
Are agent skills safe? What a SKILL.md can reach, and how to check one
A skill is instructions plus code that runs with your agent's own authority. What a SKILL.md can reach on each platform, and how to check one.
Is Meta Muse safe? Secure VM, Sentinel and approvals explained
Meta Muse runs in an isolated VM where a Sentinel approves every action and the agent never sees real credentials. What that covers, and what it misses.
ClawJacked: The Vulnerability That Proves Your AI Agent Is an Attack Surface
A malicious website could hijack your local OpenClaw agent through a WebSocket flaw. It's patched, but the lessons go way beyond one CVE.
Is That OpenClaw Skill Safe? How to Audit Before You Install
With 5,700+ skills on ClawHub, 396 flagged as malicious and 1,180 as spam, here's how to audit a skill before you install it.
Agents of Chaos: Harvard and MIT Red-Teamed OpenClaw — Here's What Broke
Researchers from Harvard, MIT, and Northeastern gave OpenClaw agents personal data, Discord access, and a virtual machine.
How to Lock Down Your OpenClaw Agent: The Security Hardening Checklist
After the Meta inbox deletion incident and six new CVEs, OpenClaw security is under the spotlight. Here's the hardening checklist to follow.