ZTP

A mandatory security audit skill for validating new code, skills, and MCP servers against the SEP-2026 Zero Trust protocol.

# openclaw-security

## Description

This skill enforces the **SEP-2026 Security Protocol**. It provides tools to audit source code for malicious patterns, obfuscation, and unauthorized network capability. It is the **Gatekeeper**; no external code (Skills, MCP Servers, Python scripts) should be integrated without passing this audit.

## Usage

Use this skill whenever you need to:

1.  **Audit** a new Python file, Skill, or MCP Server before using or installing it.
2.  **Verify** the safety of a downloaded script.
3.  **Check** for supply chain attacks (typosquatting).

## Commands

### 1. Deep Audit (Source Code)

Run the **Shield Pro 2.0** static analyzer on a target directory or file.

```bash
python3 skills/openclawSecurity/scripts/shield_pro.py --target <path_to_scan> --format json
```

**Output:** A JSON report containing `CRITICAL`, `HIGH`, and `MEDIUM` findings.
**Action:**

- If `CRITICAL` or `HIGH` > 0: **REJECT** the code.
- If `MEDIUM` > 0: **HALT** and ask User for manual review.

### 2. Supply Chain Check

Check `requirements.txt` or `package.json` for typosquatting and version pinning issues.

```bash
python3 skills/openclawSecurity/scripts/shield_pro.py --target <path_to_requirements> --mode supply-chain
```

### 3. Layer 2: External Defense Arsenal (Recommended)

If available in the environment, the Agent MUST run these SOTA tools to augment Shield Pro's findings:

| Tool          | Purpose                                         | Command                                         |
| :------------ | :---------------------------------------------- | :---------------------------------------------- |
| **Bandit**    | Python Static Analysis (Common Vulnerabilities) | `bandit -r <target_dir> -f json`                |
| **Safety**    | Python Dependency Check (Known CVEs)            | `safety check -r requirements.txt --json`       |
| **NPM Audit** | Node.js Dependency Check                        | `npm audit --json` (in package dir)             |
| **Trivy**     | Filesystem/Container Scan (Secrets/Vulns)       | `trivy fs <target_dir> --format json`           |
| **Garak**     | LLM/Prompt Injection Testing                    | `garak --model_type <type> --model_name <name>` |

> **Note:** If a tool is missing, log a warning in the final report but proceed with `shield_pro` findings.

## Workflow: The SEP-2026 Gatekeeper Process

1.  **Acquire**: Download or locate the target code.
2.  **Isolate**: ensure the code is not executed.
3.  **Scan**: Run `shield_pro.py` on the target.
4.  **Evaluate**:
    - **Pass**: No Critical/High issues.
    - **Fail**: Any Critical/High issue found. Reporting potential Line of Code (LOC) and threat type.
5.  **Report**: Present the findings to the user.

## Principles

- **Zero Trust**: treat all input as malicious.
- **No Execution**: Never run the target code during the audit.
- **Paranoia**: False positives are better than missed malware.