--- title: "Blocking OpenClaw" description: "OpenClaw (formerly Clawdbot and Moltbot) is an autonomous AI agent for macOS. Here" doc_version: "1" last_updated: "2026-06-05" canonical: "https://northpole.security/blog/blocking-openclaw" --- [Back](https://northpole.security/blog) Guides • March 6, 2026 • By Tom Burgin ![Blocking OpenClaw](https://northpole.security/images/blog/blocking-openclaw-hero-v2.jpg) ![](https://northpole.security/images/home/divider-band-top.svg) [OpenClaw](https://openclaw.ai/) (formerly Clawdbot and Moltbot) is an open-source autonomous AI agent that runs on your desktop and connects to [hundreds of services](https://clawhub.ai/skills?sort=downloads), such as Slack, Google Workspace, Notion, Outlook, and more. Users send messages through chat or schedule jobs, and the AI agent performs work and reports back to them. This broad access creates a security risk since a malicious prompt injected into any connected service could exfiltrate sensitive data from the others. If your organization wants to prevent OpenClaw from being installed or run, here’s a layered approach using Santa CEL rules that covers all three names. ## 1\. Block installation via a curl one-liner The primary installation method is a shell script piped from curl: Shell ``` curl -fsSL https://openclaw.ai/install.sh | bash ``` Create a **SigningID** rule on `platform:com.apple.curl` with a CEL policy: CELPlist ``` args.exists(a, a.contains('molt.bot') || a.contains('openclaw.ai') || a.contains('clawd.bot') ) ? BLOCKLIST : ALLOWLIST ``` > **Recommendation:** Add a custom message explaining why this is blocked, so users don’t attempt to work around it. ## 2\. Block npm and Homebrew package installation OpenClaw can also be installed via Homebrew or npm: Shell ``` brew install openclaw npm i -g openclaw ``` The package has been published under three names on npm: `clawdbot`, `moltbot`, and `openclaw`. Santa’s execution rules operate on executables, which include interpreters. A CEL rule on both `bash` and `node` looking for the package names in the arguments will catch most uses. For Homebrew, add a **SigningID** rule on `platform:com.apple.bash` with a CEL policy that blocks all three names: CELPlist ``` ( args.exists(a, a.endsWith('brew')) && args.exists(a, a.contains('clawdbot') || a.contains('moltbot') || a.contains('openclaw')) ) ? BLOCKLIST : ALLOWLIST ``` For npm, add a **SigningID** rule on `HX7739G8FX:node` (or the signing ID of your node interpreter) with a CEL policy that blocks all three names: CELPlist ``` ( args.exists(a, a.endsWith('npm')) && args.exists(a, a.contains('clawdbot') || a.contains('moltbot') || a.contains('openclaw')) ) || args.exists(a, a.endsWith('.bin/clawdbot') || a.endsWith('.bin/moltbot') || a.endsWith('.bin/openclaw') ) ? BLOCKLIST : ALLOWLIST ``` ## 3\. Block already-installed packages ### macOS app The macOS companion app has shipped under three different bundle identifiers as the project rebranded. Create **SigningID** rules for all three: - `Y5PE65HELJ:com.clawdbot.mac` - `Y5PE65HELJ:bot.molt.mac` - `Y5PE65HELJ:ai.openclaw.mac` Or use a single **TeamID** rule on `Y5PE65HELJ` to cover all past and future app names from this developer. ### npm package via Node If the npm package is already installed, the `HX7739G8FX:node` rule from step 2 will block it from running. However, if your fleet uses a Homebrew-installed version of Node that isn’t signed by a publisher, you’ll need a different approach. A Workshop [Package Rule](https://northpole.security/blog/introducing-package-rules) can automatically create CEL rules for every version of Node packaged by Homebrew, achieving the same effect as step 2 without relying on a specific signing ID. ![Create Package Rule dialog in Workshop showing a CEL expression to block OpenClaw via Node](https://northpole.security/images/blog/blocking-openclaw/node-package-rule.png) ## Summary Layer SigningID What it blocks curl `platform:com.apple.curl` Download via install script bash `platform:com.apple.bash` Homebrew install node `HX7739G8FX:node` npm install and direct Node execution of installed package macOS app `Y5PE65HELJ:*` (TeamID) Native app under all bundle IDs > **Disclaimer:** Blocking based on package or directory names is not airtight. Motivated users can work around these rules by renaming packages or directories. However, this should block the majority of use cases while giving users a clear path for who to contact if they do get blocked. ## Visibility into AI agents As always, the full log of what is happening on the machine is available in the telemetry stream. [Contact North Pole Security](https://northpole.security/contact) if you are interested in learning more about visibility into AI agents on your fleet. Santa Workshop CEL Rules ## You may also like [ ![Announcing Santa 2026.4](https://northpole.security/images/blog/santa-2026.4-hero.jpg) Releases • May 20, 2026 Announcing Santa 2026.4 Santa 2026.4 expands tamper resistance, changes clean sync semantics, adds silenceable device notifications, and continues security hardening. ](https://northpole.security/blog/santa-20264)[ ![Announcing Workshop 2026.3](https://northpole.security/images/blog/workshop-2026.3-hero.jpg) Releases • April 14, 2026 Announcing Workshop 2026.3 Workshop v2026.3 introduces CEL fallback rules, risk engine plugin filters, Santa host metrics, and much more! ](https://northpole.security/blog/workshop-20263)[ ![Announcing Santa 2026.3](https://northpole.security/images/blog/santa-2026.3-hero.jpg) Releases • April 10, 2026 Announcing Santa 2026.3 Santa 2026.3 adds encryption-aware removable media policies, CEL fallback rules for global enforcement, and significant performance improvements. ](https://northpole.security/blog/santa-20263) ## Sitemap - [Home](https://northpole.security/index.md) - [Workshop](https://northpole.security/workshop.md) - [Santa](https://northpole.security/santa.md) - [Features](https://northpole.security/features.md) - [Cookbook](https://northpole.security/cookbook.md) - [Docs](https://northpole.security/docs.md) - [Blog](https://northpole.security/blog.md) - [Glossary](https://northpole.security/glossary.md) - [About](https://northpole.security/about.md) - [Contact](https://northpole.security/contact.md)