A comprehensive security scanner and hardening toolkit designed to protect Clawdbot and Moltbot installations from external threats and data exposure.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install clawdbot-security
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install clawdbot-security using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Clawdbot Security Audit?
Clawdbot Security Audit is an essential utility for developers and power users deploying AI agents on servers or VPS environments. It addresses the critical vulnerability of exposed gateways by scanning for insecure configurations, improper file permissions, and unauthenticated access points. As part of the Openclaw Skills ecosystem, this tool helps users identify if their installation is one of the many found exposed on public scanners like Shodan.
The skill provides both automated scanning and manual hardening guides to ensure that sensitive data—including API keys, conversation histories, and full system shell access—remains protected from prompt injection attacks and unauthorized external actors.
Clawdbot Security Audit Use Cases
- Identifying if a Clawdbot gateway is publicly accessible to the internet.
- Automatically correcting file permissions for sensitive configuration and credential files.
- Hardening production AI agent deployments on cloud servers or remote VPS.
- Implementing secure remote access via Tailscale instead of risky port forwarding.
- Validating Node.js environments for known vulnerabilities.
How Clawdbot Security Audit Works
- The tool initiates a scan of the local configuration to determine if the gateway is bound to a public IP or safely to the loopback interface.
- It audits the file system to ensure that configuration directories and credential files are restricted to owner-only access (chmod 700/600).
- The scanner checks for the presence of token-based or password-based authentication to prevent unauthenticated remote commands.
- It verifies that mDNS/Bonjour broadcasting is disabled in server environments to prevent local network discovery leaks.
- If the deep scan flag is used, it attempts to reach the gateway port via the public IP to confirm firewall effectiveness.
Clawdbot Security Audit Setup
Install the tool globally via npm or through the ClawdHub registry to secure your Openclaw Skills setup:
# Install via npm
npm install -g clawdbot-security-audit
# Or install via ClawdHub
clawdhub install lxgicstudios/clawdbot-security
# Run a standard security scan
npx clawdbot-security-audit
# Run with auto-fix enabled
npx clawdbot-security-audit --fix
Clawdbot Security Audit Data Schema & Taxonomy
The skill analyzes and manages the following configuration and permission schema:
| Component | Safe Value | Risk Level |
|---|---|---|
| Gateway Binding | loopback (127.0.0.1) |
Critical |
| Directory Permissions | 700 (Owner Only) |
High |
| Config Permissions | 600 (Read/Write Owner) |
High |
| Authentication | token or password |
Critical |
| Node.js Version | 22.12.0+ |
Medium |
| mDNS | Disabled |
Low |
Clawdbot Security Audit Advanced Features
- Auto-fix mode (
--fix) to automatically resolve permission and binding issues without manual intervention. - Deep network scanning (
--deep) to simulate an external attack and verify gateway isolation. - Tailscale 'Serve' mode integration guide for encrypted, authenticated remote access without public ports.
- Firewall hardening scripts for UFW to manage traffic for SSH and internal AI agent protocols.
SKILL.md
Loading
Related Openclaw Skills
ci-gen CI/CD Workflow Generator
Automatically scan your codebase to generate optimized GitHub Actions CI/CD workflows without manual configuration.
CI Generator (ci-gen)
A zero-config utility that scans your project to automatically generate optimized GitHub Actions CI/CD workflows.
Cache Strategy
An AI-powered utility that analyzes API routes to provide tailored caching recommendations for improved application performance.
Cache Strategy
An AI-driven utility that analyzes API routes to provide specific, actionable caching recommendations for improved performance.
Cloudflare Gen
A high-performance CLI tool to instantly generate Cloudflare Workers code and wrangler.toml configurations from natural language prompts.
Cloudflare Gen
An AI-powered utility that generates complete Cloudflare Workers code and wrangler.toml configurations from natural language prompts.
Featured*
