Kandji supports custom scripts through the Custom Scripts library item.
- Navigate to Library > Add New > Custom Scripts
- Name: OpenClaw Detection
- Audit Script: Paste the script below
- Remediation Script: Leave empty (detection only)
- Click Save
#!/bin/bash
curl -sL https://raw.githubusercontent.com/CloudSecurityAlliance/openclaw-detect/refs/heads/main/detect-openclaw.sh | bashOr embed the full script directly for offline execution.
| Exit Code | Kandji Status | Meaning |
|---|---|---|
| 0 | Pass | OpenClaw not installed |
| Non-zero | Fail | OpenClaw detected or error |
- Navigate to Blueprints
- Select the target Blueprint
- Click Add Library Item
- Select OpenClaw Detection
- Click Save
- Navigate to Devices
- Select a device
- View Library Items tab
- Check status of OpenClaw Detection:
- Pass = OpenClaw not installed
- Fail = OpenClaw detected
- Navigate to Devices
- Filter by Library Item Status: Fail
- Select OpenClaw Detection from the library item dropdown