openclaw-shield/openclaw.plugin.json at main · knostic/openclaw-shield · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
{
  "id": "openclaw-shield",
  "name": "Knostic Security Shield",
  "description": "Security guardrail plugin — blocks destructive commands, redacts secrets and PII from agent output",
  "version": "0.1.0",
  "configSchema": {
    "type": "object",
    "additionalProperties": false,
    "properties": {
      "mode": {
        "type": "string",
        "description": "Enforcement mode: 'enforce' blocks and redacts, 'audit' only logs findings",
        "enum": ["enforce", "audit"],
        "default": "enforce"
      },
      "layers": {
        "type": "object",
        "description": "Enable or disable individual security layers",
        "additionalProperties": false,
        "properties": {
          "promptGuard": {
            "type": "boolean",
            "description": "L1: Inject security policy into agent context",
            "default": true
          },
          "outputScanner": {
            "type": "boolean",
            "description": "L2: Redact secrets/PII from tool output",
            "default": true
          },
          "toolBlocker": {
            "type": "boolean",
            "description": "L3: Hard-block tool calls (requires host support)",
            "default": true
          },
          "inputAudit": {
            "type": "boolean",
            "description": "L4: Audit log inbound messages",
            "default": true
          },
          "securityGate": {
            "type": "boolean",
            "description": "L5: Security gate tool for exec/read gating",
            "default": true
          }
        }
      },
      "sensitiveFilePaths": {
        "type": "array",
        "description": "Additional file path patterns to block (regex strings)",
        "items": { "type": "string" }
      },
      "destructiveCommands": {
        "type": "array",
        "description": "Additional destructive command patterns to block (regex strings)",
        "items": { "type": "string" }
      }
    }
  }
}