proteclaw/openclaw.plugin.json at main · yassinebkr/proteclaw · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
{
  "id": "proteclaw",
  "name": "ProteClaw \u2014 Security Stack",
  "version": "0.6.0",
  "description": "Defense-in-depth security for OpenClaw agents: session integrity, content tagging, signal detection, external content scanning, privilege separation, canary tokens, and bootstrap file protection.",
  "configSchema": {
    "type": "object",
    "additionalProperties": false,
    "properties": {
      "layers": {
        "type": "object",
        "additionalProperties": false,
        "properties": {
          "integrity": {
            "type": "boolean",
            "default": true
          },
          "tagging": {
            "type": "boolean",
            "default": true
          },
          "signals": {
            "type": "boolean",
            "default": true
          },
          "capabilities": {
            "type": "boolean",
            "default": false
          },
          "runtime": {
            "type": "boolean",
            "default": false
          },
          "registry": {
            "type": "boolean",
            "default": false
          },
          "privilegeSeparation": {
            "type": "boolean",
            "default": true
          }
        }
      },
      "signals": {
        "type": "object",
        "additionalProperties": false,
        "properties": {
          "minConfidence": {
            "type": "number",
            "default": 0.5,
            "minimum": 0,
            "maximum": 1
          },
          "suppressCategories": {
            "type": "array",
            "items": {
              "type": "string",
              "enum": [
                "injection",
                "exfiltration",
                "encoding",
                "roleplay"
              ]
            },
            "default": []
          },
          "alertOnHighSeverity": {
            "type": "boolean",
            "default": true
          }
        }
      },
      "logLevel": {
        "type": "string",
        "enum": [
          "debug",
          "info",
          "warn",
          "error"
        ],
        "default": "info"
      }
    }
  },
  "uiHints": {
    "layers.integrity": {
      "label": "L0: Session Integrity"
    },
    "layers.tagging": {
      "label": "L1: Content Tagging"
    },
    "layers.signals": {
      "label": "L4: Signal Detection"
    },
    "layers.capabilities": {
      "label": "L2: Capability Control (advisory)"
    },
    "layers.runtime": {
      "label": "L3: Runtime Security (advisory)"
    },
    "layers.registry": {
      "label": "L5: Trust Registry (advisory)"
    },
    "layers.privilegeSeparation": {
      "label": "LC: Privilege Separation (blocks dangerous tools on injection)"
    },
    "signals.minConfidence": {
      "label": "Minimum signal confidence",
      "placeholder": "0.5"
    },
    "signals.suppressCategories": {
      "label": "Categories to suppress"
    },
    "signals.alertOnHighSeverity": {
      "label": "Log high-severity signals"
    }
  }
}