runtime-risk-hardener v1.0
What it does
runtime-risk-hardener inspects runtime configuration settings and scores how safely your agent is set up to execute tasks. It highlights weak isolation choices like disabled sandboxes, open network access, broad filesystem permissions, weak approval settings, and missing audit logging, with practical recommendations to harden the setup.
Use cases
- OpenClaw admins preparing a production deployment: check whether runtime settings are safe before exposing an agent to real workloads.
- Security-conscious teams: standardise runtime reviews and compare environments using a simple hardening score.
- Consultants and auditors: produce quick, evidence-based guidance on where a client runtime config is too permissive.
Requirements
- Dependencies: Python 3 only, standard library modules only
- API keys: None
- OpenClaw version: Compatible with OpenClaw v2026.3.23+
Example usage
python3 scripts/runtime_risk_hardener.py --config /tmp/runtime-config.json --check
Expected output
Hardening score: 100/100
No material runtime risks detected.
If risks are present, the tool reports a lower score plus severity-ranked findings and recommended fixes.
Price
$4.99