shieldcortex 4.18.2 → 4.18.3

package/plugins/openclaw/openclaw.plugin.json

@@ -0,0 +1,205 @@
+{
+  "id": "shieldcortex-realtime",
+  "version": "4.18.3",
+  "name": "ShieldCortex Real-time Scanner",
+  "description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
+  "kind": null,
+  "engines": {
+    "openclaw": ">=2026.3.22",
+    "recommended": ">=2026.4.23"
+  },
+  "enabledByDefault": false,
+  "activation": {
+    "onStartup": false,
+    "hooks": [
+      "llm_input",
+      "llm_output",
+      "before_tool_call",
+      "session_end"
+    ],
+    "commands": [
+      "shieldcortex-status"
+    ]
+  },
+  "contracts": {},
+  "commandAliases": {
+    "shieldcortex-status": "shieldcortex-status"
+  },
+  "uiHints": {
+    "binaryPath": {
+      "label": "ShieldCortex Binary Path",
+      "help": "Optional absolute path to the shieldcortex CLI when it is not on PATH.",
+      "placeholder": "/usr/local/bin/shieldcortex",
+      "advanced": true
+    },
+    "cloudApiKey": {
+      "label": "Cloud API Key",
+      "help": "Optional ShieldCortex Cloud API key used for realtime threat forwarding.",
+      "placeholder": "sc_...",
+      "sensitive": true
+    },
+    "cloudBaseUrl": {
+      "label": "Cloud Base URL",
+      "help": "Override the ShieldCortex Cloud API base URL if you use a self-hosted or staging endpoint.",
+      "placeholder": "https://api.shieldcortex.ai",
+      "advanced": true
+    },
+    "openclawAutoMemory": {
+      "label": "Auto Memory Extraction",
+      "help": "Extract high-signal decisions and learnings from LLM output into ShieldCortex memory."
+    },
+    "openclawAutoMemoryDedupe": {
+      "label": "Dedupe Auto Memory",
+      "help": "Skip near-duplicate memories before they are written to ShieldCortex.",
+      "advanced": true
+    },
+    "openclawAutoMemoryNoveltyThreshold": {
+      "label": "Novelty Threshold",
+      "help": "Similarity threshold for duplicate suppression. Higher values keep more memories.",
+      "advanced": true
+    },
+    "openclawAutoMemoryMaxRecent": {
+      "label": "Recent Memory Cache Size",
+      "help": "How many recent extracted memories to keep in the dedupe cache.",
+      "advanced": true
+    },
+    "interceptor.enabled": {
+      "label": "Enable Tool Call Interceptor",
+      "description": "Scan memory-write tool calls and gate suspicious content behind user approval",
+      "type": "boolean"
+    },
+    "interceptor.severityActions.high": {
+      "label": "High Severity Action",
+      "description": "Action for high-severity threats (log, warn, require_approval)",
+      "type": "string"
+    },
+    "interceptor.severityActions.critical": {
+      "label": "Critical Severity Action",
+      "description": "Action for critical-severity threats (log, warn, require_approval)",
+      "type": "string"
+    }
+  },
+  "configSchema": {
+    "type": "object",
+    "additionalProperties": false,
+    "properties": {
+      "enabled": {
+        "type": "boolean"
+      },
+      "binaryPath": {
+        "type": "string"
+      },
+      "cloudApiKey": {
+        "type": "string"
+      },
+      "cloudBaseUrl": {
+        "type": "string"
+      },
+      "openclawAutoMemory": {
+        "type": "boolean"
+      },
+      "openclawAutoMemoryDedupe": {
+        "type": "boolean"
+      },
+      "openclawAutoMemoryNoveltyThreshold": {
+        "type": "number",
+        "minimum": 0.6,
+        "maximum": 0.99
+      },
+      "openclawAutoMemoryMaxRecent": {
+        "type": "integer",
+        "minimum": 50,
+        "maximum": 1000
+      },
+      "interceptor": {
+        "type": "object",
+        "properties": {
+          "enabled": {
+            "type": "boolean",
+            "default": true
+          },
+          "severityActions": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "low": {
+                "type": "string",
+                "enum": [
+                  "log",
+                  "warn",
+                  "require_approval"
+                ],
+                "default": "log"
+              },
+              "medium": {
+                "type": "string",
+                "enum": [
+                  "log",
+                  "warn",
+                  "require_approval"
+                ],
+                "default": "log"
+              },
+              "high": {
+                "type": "string",
+                "enum": [
+                  "log",
+                  "warn",
+                  "require_approval"
+                ],
+                "default": "warn"
+              },
+              "critical": {
+                "type": "string",
+                "enum": [
+                  "log",
+                  "warn",
+                  "require_approval"
+                ],
+                "default": "log"
+              }
+            }
+          },
+          "failurePolicy": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "low": {
+                "type": "string",
+                "enum": [
+                  "allow",
+                  "deny"
+                ],
+                "default": "allow"
+              },
+              "medium": {
+                "type": "string",
+                "enum": [
+                  "allow",
+                  "deny"
+                ],
+                "default": "allow"
+              },
+              "high": {
+                "type": "string",
+                "enum": [
+                  "allow",
+                  "deny"
+                ],
+                "default": "deny"
+              },
+              "critical": {
+                "type": "string",
+                "enum": [
+                  "allow",
+                  "deny"
+                ],
+                "default": "deny"
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+}