diff --git a/stacks/openclaw/main.tf b/stacks/openclaw/main.tf
index 37a3d339..19a74a23 100644
--- a/stacks/openclaw/main.tf
+++ b/stacks/openclaw/main.tf
@@ -112,8 +112,8 @@ resource "kubernetes_config_map" "openclaw_config" {
         profile = "full"
         deny    = []
         exec = {
-          host        = "sandbox"
-          security    = "full"
+          host        = "local"
+          security    = "off"
           ask         = "off"
           pathPrepend = ["/tools", "/workspace/infra"]
         }