Have I Been Clawned?

Analyze OpenClaw agent security with 72 checks and output a hardening score.

4|Updated Feb 8, 2026
One-click install
npx skills add https://github.com/wadim/haveibeenclawned --skill have-i-been-clawned
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Have I Been Clawned?
Source: https://github.com/wadim/haveibeenclawned/tree/main
Command: npx skills add https://github.com/wadim/haveibeenclawned --skill have-i-been-clawned

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates a comprehensive security audit for OpenClaw agents, revealing misconfigurations, exposed secrets, and governance gaps across 72 checks.

Core Features & Use Cases

  • 72 checks are executed locally to assess gateway, secrets, containers, MCP, and network posture.
  • Hardening score and shareable report are produced for quick risk communication.
  • Use case: Before deploying a new OpenClaw agent, run the audit to ensure credentials are protected and configurations are hardened.

Quick Start

Use the audit script directly: curl -sSL https://haveibeenclawned.com/audit.sh -o /tmp/hibc-audit.sh && bash /tmp/hibc-audit.sh --json

Frequently Asked Questions about Have I Been Clawned?

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on an OpenClaw agent before deployment?

To run an OpenClaw security audit, execute the provided audit script locally via curl. The skill analyzes the agent's configuration across 72 checks and returns a hardening score with a machine-readable JSON report.

What does an OpenClaw security audit check for?

An OpenClaw security audit checks gateway configuration, secrets, MCP, container, and network observability. It executes 72 local checks to reveal misconfigurations, exposed credentials, and governance gaps.

Can I get a machine-readable report for OpenClaw hardening automation?

Yes, you can get a machine-readable report for OpenClaw hardening automation by running the audit script with the --json flag. This outputs structured data reflecting your 72 security checks and hardening score.

Does the OpenClaw audit script require any dependencies to run?

No, the OpenClaw audit script requires no dependencies to run. It operates locally using standard shell commands via curl and bash to assess your agent's security posture.

How long does it take to scan an OpenClaw agent configuration for exposed secrets?

It takes approximately 60 seconds to scan an OpenClaw agent configuration for exposed secrets. The local audit quickly executes its 72 checks across gateway, container, and MCP environments.

What is the best way to communicate OpenClaw security risks to my team?

The best way to communicate OpenClaw security risks is by sharing the hardening score and report generated by the audit. This provides a quick, quantifiable risk assessment across 72 security checks.