A comprehensive security auditing and auto-remediation tool designed to harden OpenClaw instances against vulnerabilities and misconfigurations.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install security-hardener
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install security-hardener using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Security Hardener?
Security Hardener is a specialized utility within the Openclaw Skills ecosystem that provides a one-command solution for auditing and securing AI agent environments. It systematically evaluates the security posture of an installation, generating a numerical score from 0-100 based on industry best practices and known threat vectors.
Beyond simple diagnostics, this skill offers automated remediation capabilities to close critical security gaps instantly. It specifically addresses high-risk issues like CVE-2026-33579, exposed API keys, and weak file permissions, ensuring that your autonomous agents operate within a hardened, production-ready environment.
Security Hardener Use Cases
- Performing a full security audit on a new OpenClaw installation before going live.
- Scanning for exposed API keys across config files, memory files, and git history.
- Automating the remediation of weak file permissions and insecure network bindings.
- Verifying compliance against known CVEs and transport layer vulnerabilities.
- Generating markdown-based security posture reports for auditing or team review.
How Security Hardener Works
- The user initiates a scan via the audit command to analyze auth, transport, and network settings.
- The skill performs a deep-scan for exposed secrets using a library of over 40 API key patterns.
- A security score is calculated based on findings weighted by severity (Critical to Low).
- If vulnerabilities are found, the user can run the fix command which creates a timestamped backup before applying changes.
- Automated fixes are applied to file permissions, authentication logic, and network interfaces to lock down the instance.
Security Hardener Setup
To integrate this into your Openclaw Skills workflow, ensure you have the necessary scripts in your local environment:
# Navigate to your OpenClaw directory
cd openclaw-instance
# Run the full audit to check your current status
python3 scripts/security-hardener.py audit
# Apply recommended fixes automatically
python3 scripts/security-hardener.py fix
Security Hardener Data Schema & Taxonomy
Security Hardener organizes its findings and data using the following structure:
| Data Type | Format | Description |
|---|---|---|
| Security Score | Integer | A 0-100 rating of the instance security posture. |
| Audit Findings | JSON/Markdown | Detailed list of vulnerabilities categorized by severity. |
| Backups | Filesystem | Timestamped copies of configurations created before remediation. |
| CVE Database | Markdown | Local reference of mitigated vulnerabilities (e.g., CVE-2026-33579). |
| Secrets Library | Patterns | Regex-based definitions for 40+ API key formats. |
Security Hardener Advanced Features
- Support for --json flag to enable machine-readable output for CI/CD pipeline integration.
- Dry-run mode (--dry-run) to preview security remediations without altering files.
- Multi-layer key scanning that checks shell history, memory files, and .env files simultaneously.
- Automated restrictive permission leveling (chmod 600) for sensitive configuration and memory assets.
- Version-specific CVE checks against the installed OpenClaw core version.
SKILL.md
Loading
Related Openclaw Skills
Cognitive Loop
A high-autonomy agent architecture that implements a comprehensive Think-Action-Reflect-Test cycle for sophisticated task management.
Self-Healing Agent
A powerful auto-repair and health monitoring system designed to keep Openclaw Skills running smoothly by detecting and fixing failures in real-time.
Car Wash Promo Video
Automates the production of professional marketing videos for car washes and detailing studios to drive customer acquisition and membership sign-ups.
asclaude-monitor
A comprehensive operational dashboard for monitoring system health and managing scheduled AI agent tasks.
Agent Trading Bot
An AI-driven trading framework for OpenClaw that automates crypto and prediction market execution with built-in risk management.
asclaude-compact
A sophisticated session optimization tool that implements layered compression to manage AI context memory without consuming additional tokens.
Featured*
