A read-only VPS security preflight that validates OpenClaw exposure, SSH/firewall posture, and deployment readiness on authorized Linux hosts.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install vps-security-preflight
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install vps-security-preflight using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is OpenClaw VPS Security Preflight?
OpenClaw VPS Security Preflight is a conservative, read-only auditing workflow for authorized Linux VPS hosts. It runs a bundled script that inspects local state and uses official OpenClaw status and security commands to evaluate gateway exposure, authentication posture, RPC health, service supervision, firewall and SSH settings, security updates, time synchronization, backup readiness, and rollback evidence.
Built for deployment acceptance before real accounts or data are connected, Openclaw Skills focuses on reporting rather than remediation. It makes no configuration changes, does not install or update OpenClaw automatically, and avoids telemetry or host data export. The result is a clear PASS/WARN/FAIL/INFO summary that helps operators decide what to fix, what to verify manually, and what to escalate before production use.
OpenClaw VPS Security Preflight Use Cases
- Before connecting production accounts or real data to a new Linux VPS
- During deployment acceptance, CI gates, or go/no-go reviews
- To validate gateway exposure, authentication posture, and RPC health
- To inspect SSH and firewall posture without changing the host
- To check security updates, time sync, backup readiness, and rollback evidence
- To produce an operator-friendly preflight summary aligned with OpenClaw docs
- When Openclaw Skills is needed to confirm a host is ready for onboarding
How OpenClaw VPS Security Preflight Works
- Confirm the target is an authorized Linux VPS; if authorization is unclear, stop and ask before running Openclaw Skills.
- Run the bundled read-only audit script to inspect local host state and the official OpenClaw checks.
- Use
--strictwithNO_COLOR=1for CI or deployment acceptance so any warning or failure returns a nonzero exit code. - Review the output summary counts and every non-pass result, prioritizing FAIL, then WARN, then INFO items that need manual evidence.
- Recommend only the smallest reversible remediation, and get explicit approval before changing configuration, installing packages, opening ports, restarting services, or modifying authentication.
OpenClaw VPS Security Preflight Setup
- Ensure the skill directory is available and contains
scripts/openclaw-vps-preflight.sh. - Verify that you are operating on an authorized Linux VPS.
- Run the default read-only audit:
bash <skill-directory>/scripts/openclaw-vps-preflight.sh
- For deployment acceptance or CI, run strict mode with color disabled:
NO_COLOR=1 bash <skill-directory>/scripts/openclaw-vps-preflight.sh --strict
- If the operator explicitly requests raw deep-audit output, use
--show-audit, then redact tokens, passwords, keys, environment values, and full configs before sharing. - Compare remediations with the current OpenClaw security documentation before making any changes.
The skill is read-only by design; it does not install packages, change firewall rules, weaken authentication, or auto-update OpenClaw when the CLI is missing or incompatible.
OpenClaw VPS Security Preflight Data Schema & Taxonomy
OpenClaw VPS Security Preflight uses runtime-only data and does not create persistent artifacts by default.
| Component | Location / Shape | Purpose |
|---|---|---|
| Bundled script | scripts/openclaw-vps-preflight.sh |
Entry point that runs the read-only audit |
| Console report | stdout / stderr | Human-readable summary with counts and per-check results |
| Strict mode | --strict |
Returns nonzero when any WARN or FAIL exists |
| Raw deep audit | --show-audit |
Optional detailed output for operator review; redact before sharing |
Metadata taxonomy
PASS: the narrow check succeeded.WARN: manual review or evidence is required before production use.FAIL: release blocker until remediated or explicitly accepted.INFO: cannot be verified automatically; request operating evidence.- Summary counts: the script groups outcomes so operators can prioritize failures first, then warnings, then informational items.
Audit domains
- Gateway exposure
- Authentication
- RPC health
- Service supervision
- Firewall and SSH posture
- Security updates
- Time synchronization
- Backup readiness
- Rollback readiness
- Deployment acceptance
Openclaw Skills keeps the schema intentionally small so operators can map findings directly to remediation and approval workflows.
OpenClaw VPS Security Preflight Advanced Features
- Read-only inspection of local host state with no configuration changes
- Official OpenClaw status and security command integration
- CI-friendly
NO_COLOR=1and--strictgating for deployment acceptance - Explicit safety rules that prevent token, key, password, and full-config leakage
- Redaction-first handling for optional raw deep-audit output
- Manual-evidence prompts for
INFOchecks that cannot be verified automatically - Reversible-remediation guidance that favors the smallest safe change
- Built-in authorization gate before any audit begins
- Refusal to auto-install or auto-update OpenClaw when the CLI is missing or incompatible
SKILL.md
Loading
Related Openclaw Skills
Last Mover Advantage
A strategy skill that tests whether a market rewards being first, or rewards the durable last mover that wins the endgame.
Definite Optimism
An analytical framework that audits organizational behaviors and redirects teams from optionality to concrete, falsifiable long-term strategies.
Faceless Reels Generator
An AI workflow that turns a topic into a complete faceless short-form video package for Reels, TikTok, and Shorts.
Paperless Cloud Intake Hardening
Openclaw Skills hardens Paperless cloud intake so visible-but-unreadable files are hydrated, validated, deduplicated, and safely ingested.
Dali Creative Intelligence
Dali scores and upgrades image and video prompts before generation, preventing wasted credits and improving output quality.
savemaintenance
savemaintenance is an Openclaw Skills maintenance pipeline that backs up, reconciles, rebuilds, and audits the three-tier memory system in one deterministic run.
Featured*
