Agent skill · security · aradotso

octoguard-openclaw-security-governance

Security governance and audit system for OpenClaw AI agents with real-time policy enforcement, token monitoring, and alert notifications

Why this skill is useful

Adds a comprehensive security governance system with real-time monitoring and policy enforcement for OpenClaw that the AI cannot generate on its own.

What it needs

Requires mysql, node, postgresql installed locally. Requires dingtalk, wechat account access. About 6k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.

What this skill does

OctoGuard OpenClaw Security Governance Skill by ara.so — Security Skills collection. OctoGuard is a security governance and audit system designed for OpenClaw (Lobster AI). It monitors user conversations, tool invocations, and execution results in real-time, enforcing security policies and sending alerts when high-risk behaviors are detected. The system operates as a transparent proxy without modifying OpenClaw's core functionality. What It Does Policy-Based Interception: Blocks sensitive file access, dangerous operations, and high-risk commands before execution Token Monitoring: Tracks token consumption across sessions with threshold-based alerting Audit Logging: Records all events processed through OpenClaw including allowed and blocked actions Alert Notifications: Sends notifications via DingTalk, WeChat Work, and Email when security events occur Visual Dashboard: Provides security posture visualization and OpenClaw gateway control Non-Invasive Design: Works alongside OpenClaw without code modifications Architecture OctoGuard consists of: Backend: Node.js-based policy engine and API server Frontend: Vue.js dashboard for policy management and monitoring Database: Stores policies, audit logs, and token metrics Security Proxy: Intercepts and evaluates OpenClaw requests Installation Prerequisites Backend Setup Environment Configuration Edit backend/.env: Database Initialization Start Services Production Deployment Configuration Proxy Setup Configure OpenClaw to route through OctoGuard: Policy Engine Configuration Create security policies via API or dashboard: API Usage Create Security Policy Query Audit Logs Monitor Token Usage Control OpenClaw Gateway Common Patterns Real-Time Request Monitoring Dynamic Policy Updates Custom Alert Handler Bulk Policy Management Dashboard Access Access the web interface: Default credentials are set during initial setup. …

How to use it

Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:

@skills aradotso/octoguard-openclaw-security-governance

View the source on GitHub

Browse the @skills marketplace