Scan ClawSec backend and OpenClaw gateway for network exposure risks.
npx skills add https://github.com/4e696b6f/clawsec-agent --skill clawsec-net
Please help me install this Agent Skill. Skill: clawsec-net Source: https://github.com/4e696b6f/clawsec-agent/tree/main/skills/clawsec-net Command: npx skills add https://github.com/4e696b6f/clawsec-agent --skill clawsec-net
This Skill identifies potential network exposure risks associated with the ClawSec backend server and OpenClaw gateway configuration, ensuring sensitive services are not inadvertently made accessible.
Run the clawsec-net skill to check for network exposure issues.
High-intent search queries and answers about installing and using this skill.
To check if your backend server is listening on non-loopback interfaces, scan for port binding risks using the clawsec-net skill. It requires ss or netstat to verify that port 3001 is not exposed to external networks.
Gateway exposure in OpenClaw configuration occurs when the gateway bind address is not set to localhost. The clawsec-net skill inspects openclaw.json to identify if the gateway is inadvertently bound to accessible network interfaces.
Scan for network exposure risks before deploying ClawSec by running the clawsec-net skill. It checks port 3001 binding and OpenClaw gateway configuration to ensure sensitive services are only accessible from localhost.
Yes, clawsec-net requires ss or netstat to perform a port binding check. The skill relies on these system utilities to detect services listening on accessible network interfaces instead of loopback addresses.
Yes, you can use clawsec-net to verify your OpenClaw gateway is bound to a loopback address. The skill requires direct file access to openclaw.json to analyze the gateway bind configuration and prevent unauthorized external access.
Limitations of scanning network exposure with clawsec-net include its dependency on ss or netstat for port checks and requiring direct file access to openclaw.json. It cannot scan configurations without these system utilities or file permissions.
ryukyagamilightDiagnose TCP/IP connectivity and port issues with network utilities.
MOODMNKY-LLCAudit OpenClaw host systems for security risks and configuration gaps.
L3DigitalNetManage firewalld zones, services, ports, and rich rules via firewall-cmd.
Ed1s0nZExecute network penetration testing phases with Nmap, Nessus, and Metasploit.
