Let's check your security! 🔍

Is your AI agentleaking secrets?

CRABB scans your OpenClaw installation and gives you a simple 0-100 score with clear steps to fix issues. No security expertise needed.

🔒100% offline
⚡Under 10 seconds
📖Open source
See how it works
Live Demo

See CRABB in action

Watch a real scan find security issues. Your results are private — nothing leaves your machine.

Terminal — crabb
What We Check

4 security modules, one score

CRABB checks the most important security areas of your OpenClaw setup.

🔑

Credentials

40 points max

Finds exposed API keys, tokens, and secrets in your config files and logs.

⚡

Skills

30 points max

Scans skills for dangerous patterns like remote code execution or data theft.

🛡️

Permissions

20 points max

Checks if your sandbox mode, DM policies, and allowlists are configured safely.

🌐

Network

10 points max

Verifies your gateway isn't exposed and authentication is properly set up.

Simple Process

Three steps to peace of mind

1

Run the scan▶️

Just run npx getcrabb in your terminal. It automatically finds your OpenClaw installation and checks everything locally.

2

Get your score📊

You'll see a score from 0-100 with a letter grade (A-F). Higher is better! We'll show you exactly what needs fixing.

3

Fix or share🔧

Run --fix to apply recommended fixes with before/after comparison. Or use --share to get a link you can post. Only aggregate data is sent — never your actual secrets.

Scoring

Understand your grade

Your score translates to a letter grade that tells you how secure your setup is.

🎉
A
Excellent
👍
B
Good
🤔
C
Needs work
⚠️
D
Poor
🚨
F
Critical
FAQ

Common questions

Is this safe to run?+
Yes! CRABB runs 100% locally on your machine. It never sends any data unless you explicitly use the --share flag, and even then it only sends your score and counts — never actual secrets or file paths.
What's OpenClaw?+
OpenClaw is an open-source AI agent framework with 100k+ GitHub stars. It gives your AI assistant access to your files, shell, and messaging apps — which is powerful but needs proper security.
Is CRABB open source?+
Yes! CRABB is MIT licensed and fully open source. Check out the code on GitHub.
How is this different from OpenClaw's built-in audit?+
CRABB works in hybrid mode — it wraps OpenClaw's security audit command and adds deeper credential/skills scanning. You get a unified 0-100 score, shareable score cards, and a guided --fix flow that shows before/after comparison. Works even without OpenClaw CLI installed.
What does --fix do?+
The --fix flag runs a guided remediation flow: it scans your setup, shows found issues, asks for confirmation, applies fixes via OpenClaw CLI, then rescans to show you a before/after delta. Use --yes to skip confirmation in CI/automation.
Let's check your security! 🔍

Ready to check your security?

One command. No signup. No data sent.

PrivateFastFree