Swarm Leak Detector: Free Tool to Scan for Exposed API Keys in OpenClaw Configs
A developer running OpenClaw agents in production built a free tool to address a common security issue: API keys sitting in plaintext JSON files that any process on the machine can read.
What It Does
The tool, swarm-leak-detector, scans your configuration files for exposed credentials. It specifically looks for patterns matching over 21 different service providers including OpenAI, Anthropic, OpenRouter, and Stripe.
How to Use It
Run the scanner with this command:
npx swarm-leak-detector scan ~/.clawdbot/Key Features
- Zero dependencies
- MIT licensed
- Takes about 30 seconds to run
- Scans for 21+ credential patterns
- Specifically designed for OpenClaw/Clawdbot setups
Source and Availability
The tool is available on GitHub at https://github.com/5WARM-AI/swarm-leak-detector. The developer created it to solve their own problem of finding API keys in plaintext JSON files and is open to feedback from others running similar agent setups.
This type of security scanning tool is particularly useful for developers working with AI agents where API keys are frequently stored in configuration files and accidental exposure can lead to unauthorized access and unexpected charges.
📖 Read the full source: r/LocalLLaMA
👀 See Also
Buyer Eval: Claude skill for B2B vendor evaluation using AI agent conversations
A Claude skill that evaluates B2B software vendors by researching your company, asking domain-specific questions, and directly interrogating vendor AI agents through the Salespeak Frontdoor API. It cross-references claims against independent sources and produces evidence-based scorecards with transparent verification levels.
engram: Claude memory plugin with salience-gated capture and dream cycles
engram is a Claude memory plugin that filters observations at capture time using 5 salience dimensions, persisting only high-scoring events to SQLite with no LLM calls in scoring. It features automatic injection through 5 hooks and dream cycles that extract recurring workflows at session end.
Introducing Xrouter: A Smart Hybrid LLM Router to Optimize Cost and Performance
Discover Xrouter, an open-source creation that dynamically integrates local with cloud inference, designed to slash AI costs while boosting efficiency.
Navigating OpenClaw Installation Issues
Users encounter installation challenges between openclaw.ai and openclawd.ai, each providing different setup commands.