pi-governance: RBAC, DLP, and audit logging for OpenClaw coding agents
pi-governance is a new OpenClaw plugin that addresses security concerns with AI coding agents having unrestricted system access. The tool was created by a developer who grew tired of agents having full access to terminals, filesystems, and secrets during daily use.
How it works
The plugin sits between your coding agent and your system, intercepting and classifying every tool call. It blocks potentially risky operations based on its analysis.
Key features
- Bash command blocking
- DLP (Data Loss Prevention) scanning for secrets and PII
- Role-based access control (RBAC)
- Structured audit logging
- Works out of the box with zero configuration
Installation
Install using the OpenClaw plugin command:
openclaw plugins install @grwnd/openclaw-governanceThe developer is seeking feedback on what additional controls users might want from such a governance framework.
📖 Read the full source: r/openclaw
👀 See Also
Using Claude to audit OpenClaw setup reveals security issues
A developer used Claude to review their OpenClaw installation and discovered the bot was writing API keys in clear text in memory and JSON files, along with other security concerns.
Exploring Risks of Google Account Usage with Gemini-Cli and Gemini Pro Subscription
Gemini-Cli and your Gemini Pro subscription might pose some risks to your Google account. Here's what you need to know about potential vulnerabilities when using these AI tools.
mcp-scan: Security scanner for MCP server configurations
mcp-scan checks MCP server configurations for security issues including secrets in config files, known vulnerabilities in packages, suspicious permission patterns, exfiltration vectors, and tool poisoning attacks. It auto-detects configs for Claude Desktop, Cursor, VS Code, Windsurf, and 6 other AI clients.
Google Reports AI-Powered Hacking Reached Industrial Scale in 3 Months
Google's threat intelligence group found criminal and state groups are using commercial AI models (Gemini, Claude, OpenAI) to refine and scale attacks. A group nearly leveraged a zero-day for mass exploitation, and others are experimenting with the unguarded OpenClaw agent.