An autonomous security auditing engine that performs periodic system checks, vulnerability scanning, and risk assessment based on the OpenFang 16-layer model.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install security-audit-hand
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install security-audit-hand using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Security Audit Hand?
Security Audit Hand is a sophisticated security extension designed for the Openclaw Skills ecosystem. It provides autonomous, periodic security audits that help developers and system administrators maintain a hardened environment. By implementing a multi-layered security framework, this skill identifies vulnerabilities, audits configurations, and ensures that sensitive information remains protected.
Drawing inspiration from the OpenFang 16-layer security model, it goes beyond simple scanning by analyzing audit trails, taint tracking, and sandbox isolation. It is an indispensable tool for anyone building secure AI agent workflows who needs automated oversight of their system's security posture.
Security Audit Hand Use Cases
- Automating weekly security assessments to maintain a high security score for Openclaw Skills environments.
- Detecting and remediating exposed API keys or plain-text credentials in configuration files.
- Monitoring network gateway status to prevent insecure bindings to public or local area network interfaces.
- Performing deep log analysis to identify unauthorized access attempts or repeated system failures.
How Security Audit Hand Works
- State Recovery: The skill recalls the previous security state and loads baseline configurations from local storage.
- System Information Gathering: It executes diagnostic commands to collect network, process, and system-level metadata.
- Configuration Audit: It parses configuration files to check for auth token safety, gateway bindings, and tool deny-lists.
- Permission Validation: It inspects file system permissions and process execution rights to ensure the principle of least privilege.
- Log Analysis: The engine scans logs for sensitive data leaks, unauthorized access patterns, and critical errors.
- Risk Assessment: A weighted scoring system (0-100) evaluates findings based on severity, impact, and fixability.
- Reporting: A comprehensive Markdown report is generated with an executive summary and prioritized remediation plans.
Security Audit Hand Setup
To deploy this security module within your Openclaw Skills setup, follow these steps:
# Activate the security hand
openfang hand activate security-audit
# Run an immediate comprehensive audit
openclaw security audit
# Check the deep status of the gateway
openclaw gateway status --deep
You should also verify your security thresholds in the configuration file to match your risk tolerance.
Security Audit Hand Data Schema & Taxonomy
The skill organizes security data into structured reports and persistent state files:
| Data Component | Format | Description |
|---|---|---|
| security_reports/ | Markdown | Historical audit reports containing risk details and remediation steps. |
| security_baseline.json | JSON | The reference configuration used to measure security drifts. |
| security_audit_state | Metadata | Persistent memory tracking historical scores and generated report counts. |
| audit_schedule | Config | Defines the frequency (daily/weekly/monthly) of autonomous checks. |
Security Audit Hand Advanced Features
- Autonomous Periodic Auditing: Set custom schedules (e.g., every Monday at 9 AM) for hands-free security monitoring.
- Integrated Risk Scoring: Uses a complex algorithm to calculate security posture improvements over time.
- Automated Notifications: Can be configured to send high-risk alerts directly to communication channels like Feishu.
- Tailscale Integration: Provides recommendations for securing remote access via private mesh networking.
SKILL.md
Loading
Related Openclaw Skills
Money Maker Hand
An autonomous financial assistant that discovers, researches, and evaluates income-generating opportunities across multiple digital platforms.
Auto Researcher
An autonomous research assistant designed for deep investigations, data cross-verification, and professional citation report generation.
Todokan Kanban Task Manager
Todokan is a kanban-style task manager that enables AI agents to organize tasks, boards, and projects through the Model Context Protocol using Openclaw Skills.
Todokan Review Loop
An autonomous workflow skill that processes Todokan task boards by reading context, responding to comments, and managing task lifecycles through a review-loop.
Social Media AI Content Generator
An AI-powered CLI tool for generating platform-optimized content for Xiaohongshu, Douyin, WeChat, and Zhihu.
Jadwal Sholat (Indonesia Prayer Times)
A specialized skill for fetching accurate Islamic prayer times for Indonesian cities and districts via the api.myquran.com service.
Featured*
