Swarm Leak Detector: Free Tool to Scan for Exposed API Keys in OpenClaw Configs
A developer running OpenClaw agents in production built a free tool to address a common security issue: API keys sitting in plaintext JSON files that any process on the machine can read.
What It Does
The tool, swarm-leak-detector, scans your configuration files for exposed credentials. It specifically looks for patterns matching over 21 different service providers including OpenAI, Anthropic, OpenRouter, and Stripe.
How to Use It
Run the scanner with this command:
npx swarm-leak-detector scan ~/.clawdbot/Key Features
- Zero dependencies
- MIT licensed
- Takes about 30 seconds to run
- Scans for 21+ credential patterns
- Specifically designed for OpenClaw/Clawdbot setups
Source and Availability
The tool is available on GitHub at https://github.com/5WARM-AI/swarm-leak-detector. The developer created it to solve their own problem of finding API keys in plaintext JSON files and is open to feedback from others running similar agent setups.
This type of security scanning tool is particularly useful for developers working with AI agents where API keys are frequently stored in configuration files and accidental exposure can lead to unauthorized access and unexpected charges.
📖 Read the full source: r/LocalLLaMA
👀 See Also
LogClaw: Open-Source AI SRE for Auto-Ticketing from Logs
LogClaw is an open-source log intelligence platform that runs on Kubernetes, ingests logs via OpenTelemetry, detects anomalies using signal-based composite scoring, and automatically creates tickets with root cause analysis in about 90 seconds.
TradesMCP: Open Source MCP Server for Contractor License Verification and Construction Data
TradesMCP is an open source Model Context Protocol server that provides Claude with access to real contractor license data, building permits, material pricing, and labor rates. The tool correctly verified an active California contractor license where ChatGPT returned incorrect information.
Open Source Vigil Tool Addresses Agent Identity Problem in OpenClaw Ecosystem
An OpenClaw user building a web service discovered agent traffic indistinguishable from human users, prompting development of Vigil - an open source identity layer based on W3C DID that provides cryptographic credentials and behavioral history for agents.
OpenClaw Skill Reduces Accessibility Tree Tokens from 600K to 1.3K
A developer built an OpenClaw skill that uses ML-based element ranking to prune accessibility trees, cutting slickdeals.com from ~598K tokens to ~1.3K tokens by keeping only the top ~50 actionable elements.