ClawKeeper：透過技能、外掛程式與監控器為OpenClaw代理提供全面安全防護

ClawKeeper: Comprehensive Safety Protection for OpenClaw Agents Through Skills, Plugins, and Watchers

March 25, 2026

作者: Songyang Liu, Chaozhuo Li, Chenxu Wang, Jinyu Hou, Zejian Chen, Litian Zhang, Zheng Liu, Qiwei Ye, Yiming Hei, Xi Zhang, Zhongyuan Wang

cs.AI

摘要

OpenClaw 已迅速崛起為領先的開源自主代理程式運行時環境，提供包括工具整合、本機檔案存取與殼層命令執行等強大功能。然而，這些廣泛的操作權限也帶來了關鍵安全漏洞，使得模型錯誤可能轉化為具體的系統層級威脅，例如敏感資料外洩、權限提升及惡意第三方技能執行。現有 OpenClaw 生態系的安全措施仍高度碎片化，僅針對代理生命週期的孤立階段提供防護，缺乏整體性保護框架。為此，我們提出 ClawKeeper——一個整合多維度防護機制的即時安全框架，其包含三個互補的架構層次：(1) 技能層防護在指令層級運作，透過將結構化安全策略直接注入代理上下文，實現環境特定約束與跨平台邊界管控；(2) 外掛層防護作為內部運行時強制機制，在整個執行管線中提供配置強化、主動威脅檢測與持續行為監控；(3) 監察層防護創新地引入解耦的系統層級安全中介軟體，持續驗證代理狀態演變。該層支援無需耦合代理內部邏輯的即時執行干預，例如中止高風險動作或強制要求人工確認。我們主張此監察範式具備成為保護新一代自主代理系統的基礎建構模組之潛力。大量定性與定量評估結果顯示，ClawKeeper 在多樣化威脅情境下均展現卓越效能與強韌性。我們已公開程式碼。

English

OpenClaw has rapidly established itself as a leading open-source autonomous agent runtime, offering powerful capabilities including tool integration, local file access, and shell command execution. However, these broad operational privileges introduce critical security vulnerabilities, transforming model errors into tangible system-level threats such as sensitive data leakage, privilege escalation, and malicious third-party skill execution. Existing security measures for the OpenClaw ecosystem remain highly fragmented, addressing only isolated stages of the agent lifecycle rather than providing holistic protection. To bridge this gap, we present ClawKeeper, a real-time security framework that integrates multi-dimensional protection mechanisms across three complementary architectural layers. (1) Skill-based protection operates at the instruction level, injecting structured security policies directly into the agent context to enforce environment-specific constraints and cross-platform boundaries. (2) Plugin-based protection serves as an internal runtime enforcer, providing configuration hardening, proactive threat detection, and continuous behavioral monitoring throughout the execution pipeline. (3) Watcher-based protection introduces a novel, decoupled system-level security middleware that continuously verifies agent state evolution. It enables real-time execution intervention without coupling to the agent's internal logic, supporting operations such as halting high-risk actions or enforcing human confirmation. We argue that this Watcher paradigm holds strong potential to serve as a foundational building block for securing next-generation autonomous agent systems. Extensive qualitative and quantitative evaluations demonstrate the effectiveness and robustness of ClawKeeper across diverse threat scenarios. We release our code.