shell-security/openclaw.plugin.json at main · Kilo-Org/shell-security · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
{
  "id": "shell-security",
  "name": "ShellSecurity",
  "description": "Run a security checkup of your OpenClaw instance and get an expert analysis report from KiloCode.",
  "commandAliases": [
    { "name": "shell-security", "kind": "runtime-slash" },
    { "name": "security-checkup", "kind": "runtime-slash" }
  ],
  "configSchema": {
    "type": "object",
    "additionalProperties": false,
    "$defs": {
      "secretRef": {
        "type": "object",
        "additionalProperties": false,
        "properties": {
          "source": {
            "type": "string",
            "enum": ["env", "file", "exec"]
          },
          "provider": { "type": "string" },
          "id": { "type": "string" }
        },
        "required": ["source", "provider", "id"]
      }
    },
    "properties": {
      "authToken": {
        "description": "KiloCode auth token. Accepts either a plain string or a SecretRef pointing at an env, file, or exec provider. The plugin writes a SecretRef automatically on first use via device auth; advanced users can replace it with a plain string or a different provider reference.",
        "anyOf": [
          { "type": "string", "minLength": 1 },
          { "$ref": "#/$defs/secretRef" }
        ]
      },
      "apiBaseUrl": {
        "type": "string",
        "description": "KiloCode API base URL. Defaults to https://api.kilo.ai. Override for dev or self-hosted environments."
      }
    }
  }
}