clawdbot/docs/cli/security.md

summary, read_when

summary	read_when
CLI reference for `clawdbot security` (audit and fix common security footguns)	You want to run a quick security audit on config/state You want to apply safe “fix” suggestions (chmod, tighten defaults)

clawdbot security

Security tools (audit + optional fixes).

Related:

• Security guide: Security

Audit

clawdbot security audit
clawdbot security audit --deep
clawdbot security audit --fix

The audit warns when multiple DM senders share the main session and recommends session.dmScope="per-channel-peer" for shared inboxes. It also warns when small models (<=300B) are used without sandboxing and with web/browser tools enabled.