A read-only security auditing tool designed to scan repositories and deployment directories for configuration risks and exposed secrets.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install portable-deployment-audit
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install portable-deployment-audit using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Portable Deployment Audit?
Portable Deployment Audit is a specialized utility within the ecosystem of Openclaw Skills designed for high-integrity security reviews. It operates as a read-only scanner, ensuring that your production or staging environments remain untouched while providing deep insights into potential vulnerabilities. By focusing on file inspection rather than executing external binaries, it maintains a small footprint and high portability across different environments.
This skill is particularly effective at catching low-hanging fruit that leads to major breaches, such as hardcoded credentials, misconfigured Docker containers, and accidental Git directory exposure. It bridges the gap between manual code review and heavy-duty enterprise security suites, offering developers a fast, actionable way to harden their projects before release.
Portable Deployment Audit Use Cases
- Pre-release Hardening: Audit a local repository or workspace before pushing code to production to ensure no secrets are leaked.
- CI/CD Integration: Incorporate the audit into your build pipeline using strict mode to fail builds if high-severity issues are detected.
- Server Checkouts: Run a quick scan on a server checkout to verify that Unix file permissions and environment configurations are set correctly.
- Compliance Checks: Conduct periodic security reviews of project directories to identify wildcard CORS or risky debug logging in configuration files.
- Docker Optimization: Inspect Dockerfiles and compose setups for root user execution or missing health checks.
How Portable Deployment Audit Works
- Target Selection: The user specifies a target directory using the
--targetflag, allowing the skill to focus on a specific project or the current workspace. - File Inspection: The skill recursively traverses the directory, reading files to identify patterns related to credentials, ports, and configurations without executing any code.
- Rule Application: It applies a set of specialized checks including credential scanning, Dockerfile analysis, and Unix permission validation (on supported systems).
- Filtering and Suppression: Expected results like known open ports or bulky folders can be ignored using
--allow-portand--exclude-dirflags. - Report Generation: The skill outputs human-readable remediation advice to stdout or generates a structured JSON report for automated processing.
Portable Deployment Audit Setup
To get started with this component of Openclaw Skills, ensure you have Node.js installed and navigate to your project directory.
# Run a basic audit on the current directory
node skills/portable-deployment-audit/scripts/audit.cjs --target .
# Run a specific check for credentials and configurations
node skills/portable-deployment-audit/scripts/audit.cjs --target ./src --check credentials,configs
Portable Deployment Audit Data Schema & Taxonomy
The skill produces structured data that can be consumed by other tools or analyzed manually.
| Feature | Description |
|---|---|
| Output Formats | Standard text (stdout) for humans or structured JSON for machines. |
| Finding Severities | Issues are categorized by risk level; --strict mode targets HIGH findings. |
| Exclusion Logic | Supports comma-separated strings for directory exclusion and port whitelisting. |
| Metadata | Includes file paths, detected risk types, and short remediation recommendations. |
Portable Deployment Audit Advanced Features
- Strict CI Mode: Use the
--strictflag to force a non-zero exit code when high-risk findings are discovered, perfect for blocking insecure deployments. - JSON Interoperability: Pipe output to
jqor other processors by using the--format jsonflag for automated security reporting. - Granular Check Selection: Target specific security domains using flags like
--docker,--ports, or--check credentialsto speed up focused reviews. - Port Whitelisting: Suppress warnings for expected services by passing specific port numbers to the
--allow-portargument.
SKILL.md
Loading
Related Openclaw Skills
Tendermint Reference Skill
A CLI-based technical reference guide for developers working with Tendermint in blockchain contexts.
Wisdom Forum Skill
An automation skill designed to help AI agents interact seamlessly with the Wisdom Forum via authenticated API endpoints.
Xiaohongshu Automation Skill (xhs-ts)
A robust Playwright-based CLI tool for automating Xiaohongshu operations, including multi-account management, content publishing, and data scraping.
PlaneFilter
A sophisticated aviation data aggregator that identifies aircraft models and equipment changes using weighted confidence scoring.
RSI — Relative Strength Index Calculator
A powerful technical analysis tool for calculating Relative Strength Index and generating actionable trading signals for stocks and crypto.
Walmart Supply Chain Optimization
A specialized diagnostic tool for Walmart Marketplace sellers to identify supply chain bottlenecks and optimize WFS fulfillment costs.
Featured*
