healthcheck

Assesses OpenClaw hosts and generates prioritized remediation plans with rollback guidance.

1|Updated Apr 12, 2026
One-click install
npx skills add https://github.com/cryptopafi/nexusos-skills --skill healthcheck-cryptopafi
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: healthcheck
Source: https://github.com/cryptopafi/nexusos-skills/tree/main/healthcheck
Command: npx skills add https://github.com/cryptopafi/nexusos-skills --skill healthcheck-cryptopafi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Assess and harden the host running OpenClaw and align system configuration to a user-defined risk tolerance while preserving access and minimizing accidental lockouts. The Skill helps users discover exposure, missing updates, insecure SSH/firewall settings, and OpenClaw-specific issues, then produces a prioritized remediation plan with rollback guidance.

Core Features & Use Cases

  • Read-only discovery and audits: Run OpenClaw and OS-appropriate checks to enumerate OS, privileges, listening ports, firewall status, backups, and OpenClaw version without making changes.
  • Risk posture & remediation planning: Capture a chosen risk profile, map gaps, and produce step-by-step, numbered remediation instructions with exact commands, impact, and rollback strategies.
  • Safe execution and scheduling: Offer execution choices that require explicit approval for any state change, schedule periodic audits via OpenClaw cron when authorized, and maintain logging and redact-sensitive data.
  • Use case: Hardening a remote VPS gateway running OpenClaw by auditing current exposure, selecting a "VPS Hardened" posture, and applying staged, reversible fixes under user supervision.

Quick Start

Use the healthcheck skill to run a read-only OpenClaw security audit, determine a risk posture, and produce a numbered remediation plan with execution options.

Frequently Asked Questions about healthcheck

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on a remote host running OpenClaw?

A security audit on an OpenClaw host uses read-only checks to enumerate OS details, privileges, listening ports, and firewall status without making changes. It identifies missing updates and insecure configurations to map exposure gaps.

Can I harden SSH and firewall settings without accidentally locking myself out?

Hardening SSH and firewall settings safely involves generating a prioritized remediation plan with rollback strategies. Explicit user approval is required before applying any state changes to minimize accidental lockouts.

What is a risk posture assessment for host hardening?

Risk posture assessment maps system configuration gaps against a user-defined risk tolerance. It captures your chosen risk profile to produce numbered remediation instructions with exact commands and impact analysis.

How do I schedule periodic security audits using cron on a Raspberry Pi or VPS?

Scheduling periodic security audits using cron requires authorizing the OpenClaw cron command for recurring checks. The process maintains audit logging with sensitive data redaction for systems like Raspberry Pis or VPS instances.

Does the OpenClaw security audit support automatic remediation of exposure risks?

OpenClaw security audit does not support automatic remediation of exposure risks; it requires explicit user approval before executing any state changes. It provides a prioritized plan with rollback guidance rather than auto-applying fixes.