Skip to content

NemoClaw User Guide — Setup Guide

Source: nvidia/skills (99 installs) Category: Security & Governance

A security-focused user guide for NemoClaw — a hardened OpenClaw variant providing permission models, audit logging, and secure execution boundaries for Hermes agents. Published by NVIDIA, signaling enterprise validation of the Hermes/OpenClaw agent ecosystem. Covers security best practices for deploying autonomous agents in production environments.


Installation

npx skills add nvidia/skills --skill nemoclaw-user-guide

Prerequisites

Requirement Details
Hermes Agent v0.16.0+ with OpenClaw runtime support
NemoClaw Runtime Installed alongside the skill — provides the hardened execution layer
Audit Log Storage Local directory or S3 bucket for agent audit trails

Key Capabilities

Security Features

Capability How to Trigger Notes
Permission gates Configured in ~/.hermes/config.yaml Fine-grained tool access control
Audit logging Automatic — all agent actions logged JSONL format, S3-compatible storage
Execution sandboxing Enabled by default Prevents unauthorized filesystem/network access
Security policy review "Review my agent security policy" Hardening recommendations
Threat detection "Scan for security misconfigurations" Checks permission model, env exposure, credential hygiene

CLI Command Reference

# Run security audit on current agent config
hermes nemoclaw audit

# View recent security events
hermes nemoclaw events --last 24h

# Apply recommended hardening
hermes nemoclaw harden --apply

CorpusIQ Use Cases

Use Case How
Production Agent Security Apply NemoClaw permission gates to CorpusIQ growth agents before production deployment
Compliance Auditing Use audit logs for SOC 2 / security review evidence
Credential Hygiene Automated scanning prevents credential leakage in agent output
Permission Hardening Restrict agent tool access to minimum required for each workflow
Incident Response Audit trails enable forensic analysis of agent actions

Troubleshooting

Issue Fix
"Permission denied" on legitimate tool Check ~/.hermes/config.yaml nemoclaw rules — add explicit allow
Audit log grows too large Configure log rotation: nemoclaw config set --log-rotation 7d
"NemoClaw runtime not found" Reinstall: npx skills add nvidia/skills --skill nemoclaw-user-guide --force

Verification

# Verify skill installed
hermes skills list | grep nemoclaw-user-guide

# Run security audit
hermes nemoclaw audit

# Check audit logging is active
hermes nemoclaw status

Skills Catalog | June 28 Discovery Powered by CorpusIQ