OpenClaw Runtime Protection Plugin Installation Guide
Install the OpenClaw Runtime Protection Plugin to connect your OpenClaw applications to Alibaba Cloud AI Guardrails for real-time detection and interception of multi-dimensional threats such as content compliance violations, prompt injection attacks, sensitive information leakage, and malicious files.
Before you start, read OpenClaw Runtime AI Security Protection.
Installation process
-
Log on to the AI Guardrails console.
-
Authorize the security plugin to invoke AI Guardrails service.
-
Preview the default detection policy and adjust label configurations based on your business scenario.
-
Dedicated service:
agent_runtime_guard -
We recommend enabling the following protection dimensions: content compliance violations, prompt injection attacks, sensitive information leakage, and malicious file detection.
-
-
Prerequisites
-
Environment dependency: Node.js 22 or later. Run
node --versionto verify. -
Command check: OpenClaw is installed. Run
openclaw -hto view command help.
-
-
Obtain the installation command.
NoteThe installation command has a validity period. After it expires, regenerate it on the console guidance page.
If the command is still valid, you can click the refresh button to avoid command leakage.
Installation option 1
-
After obtaining the OpenClaw security plugin installation command from the AI Guardrails console, you can directly pass it to OpenClaw for automatic installation.
OpenClaw installs the plugin directly, and your OpenClaw instance immediately starts security protection.
-
Result query: Send a test request (which may contain simulated risks or tool invocations) and view real-time interception results in the console.
Installation option 2
-
Run the installation command manually.
ImportantYou must restart the OpenClaw Gateway during installation to activate the plugin.
-
Confirm the installation status:
openclaw plugins info @alicloud/openclaw-security-assistantopenclaw plugins list
-
Result query: Send a test request (which may contain simulated risks or tool invocations) and view real-time interception results in the console.
Uninstall command
Run the following command to uninstall:
wget -q "https://update.aegis.aliyun.com/download/openclaw-security-assistant/1.0.0/linux/openclaw-security-assistant-install.sh" && chmod +x openclaw-security-assistant-install.sh && ./openclaw-security-assistant-install.sh uninstall