What problem does it solve? Self-hosted OpenClaw gateways often run on machines with unknown exposure: open ports, missing firewall rules, no disk encryption, or unverified backups. This Skill performs a structured, read-only security audit of the host and turns the findings into a staged, reversible hardening plan without breaking remote access. ## Core Features & Use Cases - Read-only host audit: Runs commands like openclaw security audit --deep, firewall status checks, listening-port scans, and disk encryption checks on macOS, Linux, and Windows. - Risk profiling: Infers OS, privilege level, access path (SSH, RDP, tailnet), network exposure, and gateway bind/auth configuration before recommending anything. - Staged hardening menu: Offers posture tiers (convenience, balanced, strict) and concrete actions such as binding the gateway to loopback, requiring auth, enabling updates, and verifying backups. - Use Case: You just deployed OpenClaw on a VPS with a public IP. The Skill audits SSH, firewall, and gateway exposure, then walks you through locking down ports and enabling key-only SSH with rollback notes. ## Quick Start Ask the assistant to run a security healthcheck on this OpenClaw host and approve the read-only checks when prompted.
