A comprehensive security auditing and remediation tool for OpenClaw configuration files.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install oc-security-hardener
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install oc-security-hardener using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Security Hardener?
The security-hardener is a specialized utility designed to identify and remediate security vulnerabilities within an OpenClaw deployment. By scanning the openclaw.json configuration file, it detects critical risks such as exposed API keys, insecure gateway bindings, and overly permissive execution environments, ensuring your Openclaw Skills operate within a secure framework.
This tool provides a comprehensive security score and actionable recommendations, allowing developers to move from a fair or poor security posture to production-ready excellence. It bridges the gap between rapid agent deployment and professional-grade security standards.
Security Hardener Use Cases
- Auditing openclaw.json for hardcoded API keys or sensitive tokens to prevent credential leaks.
- Restricting gateway bindings to loopback to prevent external access to internal agent services.
- Hardening execution sandboxes to prevent unauthorized code execution during agent tasks.
- Generating professional security reports for compliance or team review within Openclaw Skills environments.
- Automating the fix of file permissions and insecure authentication settings to meet production standards.
How Security Hardener Works
- The tool parses the local openclaw.json and environment files to build a comprehensive security profile.
- It runs a series of heuristic checks ranging from critical network bindings to low-impact performance settings.
- A security score from 0 to 100 is calculated based on the severity and density of the findings.
- Detailed logs or JSON reports are generated to highlight specific lines or settings that require immediate attention.
- Users can opt to apply automated fixes, which include creating configuration backups before any modifications are written to disk.
Security Hardener Setup
To begin securing your environment, use the following commands within your Openclaw Skills setup:
# Perform a full security audit (read-only)
python scripts/hardener.py audit
# Automatically fix common security issues (creates a backup first)
python scripts/hardener.py fix
# Scan specifically for exposed API keys or secrets
python scripts/hardener.py scan-secrets
# Generate a detailed markdown report for your team
python scripts/hardener.py report -o security-report.md
Security Hardener Data Schema & Taxonomy
The security-hardener interacts with configuration files and produces structured audit data. The following schema defines its primary inputs and outputs:
| Component | Type | Description |
|---|---|---|
| openclaw.json | Input | The primary configuration file scanned for vulnerabilities and insecure defaults. |
| .env | Input | Analyzed to ensure credentials are properly externalized from the main config. |
| audit_report | Output | A structured report available in Markdown or JSON format containing the security score. |
| config_backups | Output | Timestamped copies of configuration files created before an automated fix is applied. |
Security Hardener Advanced Features
- Granular remediation controls using the --only flag to target specific vulnerability classes like gateway or permissions.
- JSON-formatted output support for seamless integration into CI/CD pipelines and automated security gates.
- Multi-category scoring system that evaluates your Openclaw Skills based on critical, high, medium, and low severity risks.
- Automated file permission enforcement to ensure sensitive configuration files are not readable by unauthorized system users.
SKILL.md
Loading
Related Openclaw Skills
Daily Business Report
An automated utility to aggregate weather, crypto prices, news, and system health into a unified daily briefing.
Content Repurposer
A CLI-driven engine that transforms long-form articles into optimized content for Twitter, LinkedIn, Instagram, and email.
Cost Guardian
A comprehensive cost tracking and optimization utility for monitoring AI API usage, infrastructure expenses, and subscription renewals.
Smart Cron
A powerful utility to schedule and manage Openclaw Skills using plain English commands instead of complex cron syntax.
ops-journal
A structured operational journal that automates incident timelines, deployment logging, and searchable postmortem generation.
Passive Income Monitor
A unified monitoring tool for tracking multiple passive income streams, including bandwidth nodes, decentralized storage, and DeFi staking.
Featured*
