docs/cli/security.md

metadata

summary: CLI reference for `moltbot security` (audit and fix common security footguns)
read_when:
  - You want to run a quick security audit on config/state
  - You want to apply safe “fix” suggestions (chmod, tighten defaults)

moltbot security

Security tools (audit + optional fixes).

Related:

• Security guide: Security

Audit

moltbot security audit
moltbot security audit --deep
moltbot security audit --fix

The audit warns when multiple DM senders share the main session and recommends session.dmScope="per-channel-peer" for shared inboxes. It also warns when small models (<=300B) are used without sandboxing and with web/browser tools enabled.