openclaw-egress
⚠Review·Scanned 2/17/2026
This skill scans an agent workspace for outbound network calls, suspicious domains, and data-exfiltration patterns. It includes explicit instructions to run python3 {baseDir}/scripts/egress.py, a git clone https://github.com/AtlasPA/openclaw-egress.git install step, and the code reads the OPENCLAW_WORKSPACE env var.
from clawhub.ai·vcd024ba·17.9 KB·0 installs
Scanned from 1.0.1 at cd024ba · Transparency log ↗
$ vett add clawhub.ai/atlaspa/openclaw-egressReview findings below
OpenClaw Egress
Network data loss prevention for OpenClaw, Claude Code, and any Agent Skills-compatible tool.
Maps every external connection your skills could make. Flags exfiltration endpoints, suspicious domains, and network function calls.
Want automated blocking? Upgrade to Pro — blocking, quarantine, and URL allowlist enforcement. Get Pro access.
Install
git clone https://github.com/AtlasPA/openclaw-egress.git
cp -r openclaw-egress ~/.openclaw/workspace/skills/
Usage
# Full network scan
python3 scripts/egress.py scan
# Skills-only scan
python3 scripts/egress.py scan --skills-only
# List all external domains
python3 scripts/egress.py domains
# Quick status
python3 scripts/egress.py status
What It Detects
- Data exfiltration — Base64/hex payloads in URL parameters
- Sharing services — Pastebin, transfer.sh, 0x0.st, file.io
- Request catchers — ngrok, requestbin, pipedream, beeceptor
- Dynamic DNS — duckdns, no-ip, dynu, freedns
- URL shorteners — bit.ly, tinyurl, t.co, goo.gl
- IP endpoints — Direct IP address connections
- Suspicious TLDs — .xyz, .tk, .ml, .ga, .cf, .top
- Network code — urllib, requests, httpx, aiohttp, curl, wget, fetch
- Webhook callbacks — /webhook, /callback, /hook, /beacon endpoints
Free vs Pro
| Feature | Free | Pro |
|---|---|---|
| URL detection & classification | Yes | Yes |
| Network code analysis | Yes | Yes |
| Domain mapping | Yes | Yes |
| Block exfil payloads | - | Yes |
| Quarantine calling skill | - | Yes |
| URL allowlist enforcement | - | Yes |
| Real-time egress monitoring | - | Yes |
Requirements
- Python 3.8+
- No external dependencies (stdlib only)
- Cross-platform: Windows, macOS, Linux
License
MIT