ctct-security-patrol

Run OpenClaw Security Patrol audits and generate local or online reports.

355|36|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/CTCT-CT2/openclaw-security-watchdog --skill ctct-security-patrol
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ctct-security-patrol
Source: https://github.com/CTCT-CT2/openclaw-security-watchdog/tree/main
Command: npx skills add https://github.com/CTCT-CT2/openclaw-security-watchdog --skill ctct-security-patrol

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

OpenClaw 安全巡检工具通过一键运行系统安全巡检,生成易懂的报告,降低人工分析成本、提升安全态势感知。

Core Features & Use Cases

  • 一键执行全面巡检覆盖核心运行环境、敏感目录、SSH 及网络暴露等维度,并输出可读的报告。
  • 支持离线模式(仅本地)或完整检测并可选联网威胁情报查询与上报(需用户确认)。
  • 通过 OpenClaw cron 设置定时巡检,自动产出本地报告,便于持续合规审计。

Quick Start

在 OpenClaw 会话中说出“执行安全巡检”即可开始巡检。

Frequently Asked Questions about ctct-security-patrol

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a system security audit and generate a readable report?

To run a system security audit, this tool executes the OpenClaw Security Patrol to scan core environments, sensitive directories, SSH, and network exposure, producing a detailed results file alongside a human-readable summary.

Do I need Node.js to perform local security patrols and scheduled scans?

Yes, you need Node.js v18+ installed on the host to perform local security patrols and scheduled scans. The Skill directory must also be present to execute the security audit and generate local reports.

Can I automate security posture checks using cron without leaking network data?

Yes, you can automate security posture checks using OpenClaw cron to schedule local scans. In local mode, strict privacy guidelines ensure no network data leaks occur during the automated report generation.

What is the difference between local only mode and full threat intelligence assessment?

Local only mode strictly restricts network data leaks by keeping scans offline, whereas full assessment mode enables threat intelligence queries and reporting, requiring explicit user consent for network push operations.

What does a comprehensive security patrol cover for system posture checking?

A comprehensive security patrol covers core running environments, sensitive directories, SSH configurations, and network exposure dimensions, outputting a detailed results file and a summary to assess overall system posture.

How do I set up the security patrol tool for the first time?

To set up the security patrol tool, install Node.js v18+, ensure the Skill directory is present, and initiate the session by saying execute security patrol to configure mode selection and start auditing.