A fast, 10-point security auditor for OpenClaw configurations and host environments providing PASS/FAIL reports and automated remediation.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install openclaw-security-check
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install openclaw-security-check using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is OpenClaw Security Check?
OpenClaw Security Check is a purpose-built auditing tool designed to secure your AI agent environment. As a key component within the Openclaw Skills library, it performs a rapid 10-point security assessment of your openclaw.json configuration and host-level security settings. It identifies critical risks like plaintext secrets, exposed gateway ports, and permissive channel policies.
This skill bridges the gap between basic deployment and a production-hardened environment. By providing clear PASS/FAIL reports, it allows developers to maintain a high security standard without manually auditing complex configuration files. Whether used via CLI or as a natural language command, it ensures that your Openclaw Skills are running in a protected ecosystem.
OpenClaw Security Check Use Cases
- Validating that the gateway bind is set to loopback to prevent external exposure.
- Auditing authentication token strength to ensure compliance with 32-character minimums.
- Checking file permissions on openclaw.json to prevent unauthorized local access.
- Hardening host SSH settings and verifying firewall status to protect the agent's environment.
How OpenClaw Security Check Works
- The skill scans the active configuration file and host environment for ten specific security benchmarks.
- Each check is assigned a severity level from MEDIUM to CRITICAL based on potential impact.
- A comprehensive PASS/WARN/FAIL report is generated for the user to review.
- For any failed checks, the skill offers automated fix recipes to remediate the vulnerability.
- Upon user approval, changes are applied and verified with a follow-up security audit.
OpenClaw Security Check Setup
To utilize this security tool within your Openclaw Skills setup, execute the script from your installation directory:
# Run the standard security report
scripts/security-check.sh
# Run the report with structured JSON output
scripts/security-check.sh --json
You can also integrate it into your automated workflows by adding it to your HEARTBEAT.md or scheduling it via the OpenClaw cron system.
OpenClaw Security Check Data Schema & Taxonomy
The skill analyzes the openclaw.json structure and system-level configuration files. Results are organized as follows:
| Item | Focus | Threshold |
|---|---|---|
| Gateway | Bind & Auth | Loopback only; Mode not off |
| Tokens | Entropy | 32+ characters recommended |
| Policies | Channel Access | Pairing or allowlist required |
| Host | Firewall & SSH | Active UFW; No root/password SSH |
OpenClaw Security Check Advanced Features
- Integrated auto-fix logic for critical gateway and permission vulnerabilities.
- Cron job support for scheduled daily security audits via the CLI.
- Native heartbeat compatibility for real-time monitoring of security drift.
- Seamless handoff to the comprehensive healthcheck skill for deep infrastructure hardening.
SKILL.md
Loading
Related Openclaw Skills
Gateway Watchdog
A proactive monitoring utility that detects abnormal error rates and spikes across multiple messaging channels to prevent service outages.
Feishu Document Readability Optimization
A technical skill for AI agents to maintain professional visual hierarchy and rich text integrity when programmatically editing Feishu or Lark documents.
Feishu Document Writing Assistant
An intelligent documentation skill that converts unstructured chat logs and meeting notes into professional, high-hierarchy Feishu documents.
Chat with Xiaoti (L)
A communication interface enabling AI agents to interact, relay messages, and maintain dialogue history with Xiaoti, an OpenClaw AI assistant.
Speech Notes
A sophisticated AI skill designed to convert raw voice recordings into professionally structured, high-impact meeting minutes and lecture summaries.
Jenkins
A robust integration allowing AI agents to control and monitor Jenkins CI/CD servers directly through a REST API interface.
Featured*
