mcpField
N
nemoclaw-user-configure-security

nemoclaw-user-configure-security

github.com/promptingcompanySecurity039 installsUpdated 17w ago
Repository

About nemoclaw-user-configure-security

A NemoClaw security skill for users reviewing sandbox posture, control trade-offs, and credential handling. It directs readers to focused references on NemoClaw and OpenClaw security boundaries.

Key features

  1. 01Security posture and control risk guidance
  2. 02OpenClaw control boundary reference
  3. 03Credential storage threat model

Use cases

  1. 01Review sandbox security defaults
  2. 02Assess controls outside NemoClaw
  3. 03Locate credential storage guidance

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/promptingcompany/nv-skills --skill nemoclaw-user-configure-security

After installing, type/nemoclaw-user-configure-securityin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

BENCHMARK.md
skill-card.md
skill.oms.sig
evals/
evals.json
references/
best-practices.md
credential-storage.md
openclaw-controls.md

Details

From the project README

NemoClaw Security Best Practices: Controls, Risks, and Posture Profiles

References

  • Load references/best-practices.md when evaluating security posture, reviewing sandbox security defaults, or assessing control trade-offs. Presents a risk framework for every configurable security control in NemoClaw.
  • Load references/openclaw-controls.md when reviewing the security boundary between NemoClaw and OpenClaw or assessing what NemoClaw does not cover. Lists OpenClaw security controls that operate independently of NemoClaw, including prompt injection detection, tool access control, rate limiting, environment variable policy, audit framework, supply chain scanning, messaging access policy, context visibility, and safe regex.
  • Load references/credential-storage.md when reviewing how credentials are handled, locating a stored credential, or assessing the storage threat model. Covers where NemoClaw stores provider credentials, why nothing is persisted to host disk, and how the OpenShell gateway acts as the single system of record.

Comments

Markdown supported