`clawdbot security`

Scope

Use this page when:

• You want to run a quick security audit on config/state
• You want to apply safe “fix” suggestions (chmod, tighten defaults)

Security tools (audit + optional fixes).

Related:

• Security guide: Security

Audit

clawdbot security audit
clawdbot security audit --deep
clawdbot security audit --fix

The audit warns when multiple DM senders share the main session and recommends session.dmScope="per-channel-peer" for shared inboxes. It also warns when small models (<=300B) are used without sandboxing and with web/browser tools enabled.