openclaw/docs/cli/security.md

summary, read_when, title

summary	read_when	title
CLI reference for `openclaw security` (audit and fix common security footguns)	You want to run a quick security audit on config/state You want to apply safe “fix” suggestions (chmod, tighten defaults)	security

openclaw security

Security tools (audit + optional fixes).

Related:

• Security guide: Security

Audit

openclaw security audit
openclaw security audit --deep
openclaw security audit --fix

The audit warns when multiple DM senders share the main session and recommends session.dmScope="per-channel-peer" (or per-account-channel-peer for multi-account channels) for shared inboxes. It also warns when small models (<=300B) are used without sandboxing and with web/browser tools enabled.