mcpField
N
nemoclaw-user-configure-security

nemoclaw-user-configure-security

github.com/nvidiaSecurity3.8k845 installsUpdated today
Repository

About nemoclaw-user-configure-security

A skill for evaluating NemoClaw security configuration, collecting guidance on best practices, control boundaries, and credential storage. It supports reviews of sandbox defaults, control trade-offs, and credential threat models.

Key features

  1. 01Assess configurable security controls
  2. 02Review sandbox security defaults
  3. 03Explain NemoClaw and OpenClaw control boundaries
  4. 04Describe credential storage and its threat model

Use cases

  1. 01Evaluate NemoClaw security posture
  2. 02Review sandbox controls and trade-offs
  3. 03Assess credential storage risks

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/nvidia/skills --skill nemoclaw-user-configure-security

After installing, type/nemoclaw-user-configure-securityin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

BENCHMARK.md
skill-card.md
skill.oms.sig
evals/
evals.json
references/
best-practices.md
credential-storage.md
openclaw-controls.md

Details

From the project README

NemoClaw Security Best Practices: Controls, Risks, and Posture Profiles

References

  • Load references/best-practices.md when evaluating security posture, reviewing sandbox security defaults, or assessing control trade-offs. Presents a risk framework for every configurable security control in NemoClaw.
  • Load references/openclaw-controls.md when reviewing the security boundary between NemoClaw and OpenClaw or assessing what NemoClaw does not cover. Lists OpenClaw security controls that operate independently of NemoClaw, including prompt injection detection, tool access control, rate limiting, environment variable policy, audit framework, supply chain scanning, messaging access policy, context visibility, and safe regex.
  • Load references/credential-storage.md when reviewing how credentials are handled, locating a stored credential, or assessing the storage threat model. Covers where NemoClaw stores provider credentials, why nothing is persisted to host disk, and how the OpenShell gateway acts as the single system of record.

Comments

Markdown supported