Awesome NemoClaw
https://github.com/VoltAgent/awesome-nemoclaw- Category
- AI Agents
- Rank
- No. 1994Tools index
- Pricing
- Open Source
- Type
- TOOL
- Builder
- VoltAgent
- GitHub
- 97 stars
- Date
About
A curated collection of Nvidia NemoClaw presets, recipes, and playbooks for sandboxed OpenClaw operations.
What it does
Awesome NemoClaw turns common service-access requirements into readable network-policy examples for sandboxed agents. Its rules constrain hosts, ports, HTTP methods, API paths, TLS handling, and allowed executables. It also points operators toward upstream deployment, monitoring, approval, and model-routing guidance.
Why it's ranked here
Its practical value comes from covering concrete integrations such as AWS, Google Cloud, GitLab, Notion, Teams, Stripe, and Sentry. The policies expose meaningful security controls instead of merely listing products. However, they remain starting points, not validated production configurations.
What's good
The examples make least-privilege policy design tangible. AWS access separates identity, storage, and model endpoints. Linear permits only GraphQL posts. Stripe limits traffic to two methods under its main API prefix. Every supplied service policy restricts execution to the OpenClaw binary.
Tradeoffs
The community policies are explicitly unaudited examples. Several contain tenant, bucket, application, organization, or region assumptions that operators must replace or verify. Broad wildcard paths remain in many rules, and the repository provides guidance rather than proof that a customized policy is safe.
How to use it well
It suits operators already adopting NemoClaw who need a policy draft or a map of relevant operational documentation. Copy the nearest service example, narrow its hosts, methods, paths, and executable scope, then test it in staging. It does not provide the runtime implementation or security validation.
Technical notes+
presets/README.md defines the preset shape and documents two consumption paths: copying a preset for the NemoClaw policy command or merging endpoint groups before applying them through OpenShell. presets/aws.yaml separates STS, S3, and Bedrock endpoints; presets/gcp.yaml covers OAuth, Cloud Storage, and Vertex AI; presets/linear.yaml permits POST requests only to /graphql; and presets/teams.yaml separates Microsoft Graph from login traffic. README.md combines these community files with links to official presets, architecture material, deployment recipes, monitoring guidance, and the canonical implementation. CONTRIBUTING.md states that the repository curates links and requires practical, documented, publicly accessible submissions.
Observed
- License
- MIT License
- Artifact type
- Curated resource catalogue with YAML network-policy examples
- Policy interface
- Presets define endpoint rules by host, port, protocol, enforcement, TLS handling, HTTP method, and path
- Usage surface
- Policies are applied through NemoClaw or OpenShell command-line tooling
- Runtime relationship
- The NemoClaw runtime implementation lives in the external NVIDIA repository
- Security status
- Community presets are example baselines and are not audited production policies
Read from README.md, LICENSE, CONTRIBUTING.md, presets/aws.yaml, presets/gcp.yaml, presets/README.md, presets/neon.yaml, presets/teams.yaml, presets/gitlab.yaml, presets/linear.yaml, presets/notion.yaml, presets/sentry.yaml, presets/stripe.yaml, presets/vercel.yaml, presets/algolia.yaml.
What it can do
Load NemoClaw presets for OpenClaw operations
Preset selection or configuration parameters → Configured NemoClaw environment with preset settings
Execute curated NemoClaw recipes
Recipe selection and input data → Processed results based on recipe logic
Run NemoClaw playbooks in sandboxed environment
Playbook file and execution parameters → Playbook execution results and logs
Browse and select from curated NemoClaw configurations
Search criteria or browsing requests → List of available presets, recipes, or playbooks
Initialize sandboxed OpenClaw operations
OpenClaw configuration and safety parameters → Isolated OpenClaw environment ready for operations
Tags
Comments (0)
No comments yet
Editorially curated, with community endorsements as a secondary signal. Corrections welcome.