---
name: security-hardener-claw-chain-response-pack
description: Audit OpenClaw workspaces for sandbox escape exposure, unsafe scripts, sensitive config references, marketplace supply-chain risk, patch validation evidence, and incident response checklists after OpenShell/Claw Chain style advisories.
---
Security Hardener / Claw Chain Response Pack
Use when
Use after sandbox, supply-chain, marketplace, or OpenShell/Claw Chain style advisories, and before enabling untrusted skills or integrations.
Workflow
1. Scan a workspace or skill folder without executing untrusted code.
2. Run `python3 scripts/audit_claw_chain.py --target <path> --json`.
3. Treat `EXPOSED` as a blocker, `HARDEN_WITH_ACTIONS` as requiring mitigation, and `HARDENED_BASELINE` as ready for normal gates.
4. Capture patch status, risky patterns, and isolation recommendations for Warlock.
Parameters
→ `--target`: workspace or skill directory to audit.
→ `--json`: emit machine-readable output.
→ `--self-test`: run built-in fixture tests.
Output
Returns exposure status, hardening findings, patch validation checklist, and response actions.
Release evidence
Reviewed in the 2026-06-15 GetAgentIQ warehouse propagation cycle.