Security plugin for OpenClaw agents - prevents secret leaks, PII exposure, and destructive command execution