About nemoclaw-user-configure-security
A skill for evaluating NemoClaw security configuration, collecting guidance on best practices, control boundaries, and credential storage. It supports reviews of sandbox defaults, control trade-offs, and credential threat models.
Key features
- 01Assess configurable security controls
- 02Review sandbox security defaults
- 03Explain NemoClaw and OpenClaw control boundaries
- 04Describe credential storage and its threat model
Use cases
- 01Evaluate NemoClaw security posture
- 02Review sandbox controls and trade-offs
- 03Assess credential storage risks
Install
Copy the command and run it in a terminal.
$
npx skills add https:/ / github.com/ nvidia/ skills --skill nemoclaw-user-configure-securityAfter installing, type/nemoclaw-user-configure-securityin Claude Code to confirm it loaded.
Bundled files
References and scripts installed along with SKILL.md.
BENCHMARK.mdskill-card.mdskill.oms.sigevals/evals.jsonreferences/best-practices.mdcredential-storage.mdopenclaw-controls.mdDetails
From the project READMENemoClaw Security Best Practices: Controls, Risks, and Posture Profiles
References
- Load references/best-practices.md when evaluating security posture, reviewing sandbox security defaults, or assessing control trade-offs. Presents a risk framework for every configurable security control in NemoClaw.
- Load references/openclaw-controls.md when reviewing the security boundary between NemoClaw and OpenClaw or assessing what NemoClaw does not cover. Lists OpenClaw security controls that operate independently of NemoClaw, including prompt injection detection, tool access control, rate limiting, environment variable policy, audit framework, supply chain scanning, messaging access policy, context visibility, and safe regex.
- Load references/credential-storage.md when reviewing how credentials are handled, locating a stored credential, or assessing the storage threat model. Covers where NemoClaw stores provider credentials, why nothing is persisted to host disk, and how the OpenShell gateway acts as the single system of record.
Comments
Markdown supported