Openclaw egress

Skill AtlasPA/openclaw-egress

Network data loss prevention for agent workspaces. Scans skills and files for outbound URLs, data exfiltration endpoints, suspicious domains, and network function calls. Maps every external connection. Free alert layer — upgrade to openclaw-egress-pro for blocking, quarantine, and URL allowlists.From its SKILL.md

Install

npx -y skills add AtlasPA/openclaw-egress

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

2.3 KB, 450 tokens by cl100k_base, as published. Nobody here has run it

OpenClaw Egress

Network DLP for agent workspaces. Scans skills and files for outbound URLs, data exfiltration endpoints, and network function calls.

The Problem

Skills can phone home. A compromised skill can POST your workspace contents, API keys, or conversation history to an external server. Nothing monitors what URLs your skills connect to or what data they could send.

Need automated blocking? Upgrade to openclaw-egress-pro for blocking, quarantine, and URL allowlists.

Commands

Full Scan

Scan workspace for all outbound network risks.

python3 {baseDir}/scripts/egress.py scan --workspace /path/to/workspace

Skills-Only Scan

python3 {baseDir}/scripts/egress.py scan --skills-only --workspace /path/to/workspace

Domain Map

List all external domains referenced in workspace.

python3 {baseDir}/scripts/egress.py domains --workspace /path/to/workspace

Quick Status

python3 {baseDir}/scripts/egress.py status --workspace /path/to/workspace

What It Detects

Risk	Pattern
CRITICAL	Base64/hex payloads in URLs, pastebin/sharing services, request catchers, dynamic DNS
HIGH	Network function calls (requests, urllib, curl, wget, fetch), webhook/callback URLs
WARNING	Suspicious TLDs (.xyz, .tk, .ml), URL shorteners, IP address endpoints
INFO	Any external URL not on the safe domain list

Exit Codes

0 — Clean
1 — Network calls detected (review needed)
2 — Exfiltration risk detected (action needed)

No External Dependencies

Python standard library only. No pip install. No network calls. Everything runs locally.

Cross-Platform

Works with OpenClaw, Claude Code, Cursor, and any tool using the Agent Skills specification.

What ships with it: 2 files

16.4 KB alongside SKILL.md, 1 of them executable

scripts/

egress.pyruns14.4 KB

README.md1.9 KB