Securing OpenClaw with OpenLeash

OpenClaw is one of the most powerful open-source AI agents available today. However, its power comes with significant risks if not properly secured. In this post, we'll walk through how to use OpenLeash to run OpenClaw safely.

Step 1: Installation

First, install OpenLeash and the OpenClaw integration package:

Standard Output

npm install -g openleash openclaw

Step 2: Defining Rules

Next, we need to define the security rules that OpenLeash will enforce. Create a file named rules.rego and add the following rules:

Standard Output

package openleash

# Deny access to sensitive files
deny if {
    input.action == "fs.read"
    contains(input.path, ".env")
}

# Deny network requests to unknown domains
deny if {
    input.action == "net.connect"
    not contains(input.domain, "api.openai.com")
}

Step 3: Execution

Finally, run OpenClaw through the OpenLeash runtime:

Standard Output

openleash run openclaw --task "Summarize the latest news"

OpenLeash will now monitor OpenClaw's behavior and block any actions that violate the rules defined in rules.rego.