healthcheck

Audit and harden OpenClaw hosts covering SSH, firewall, updates, backups, and gateway security.

1|Updated Jun 9, 2026
One-click install
npx skills add https://github.com/JEROME-PRAKASH-L/openclaw --skill healthcheck-jerome-prakash-l
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: healthcheck
Source: https://github.com/JEROME-PRAKASH-L/openclaw/tree/main/skills/healthcheck
Command: npx skills add https://github.com/JEROME-PRAKASH-L/openclaw --skill healthcheck-jerome-prakash-l

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Running an always-on personal AI assistant on your own hardware exposes the host to risks like open ports, weak SSH configurations, missing disk encryption, and unpatched systems. This Skill performs a structured, read-only security audit of an OpenClaw host and proposes staged, reversible hardening steps without breaking your access. ## Core Features & Use Cases - Read-only security checks: Runs commands like openclaw security audit --deep, firewall status, listening-port scans, and disk encryption checks on macOS, Linux, and Windows. - Risk profiling: Infers context (OS, access path, network exposure, backup status) and lets you choose a Convenience, Balanced, or Strict security posture. - Staged hardening plan: Produces a severity-ranked findings report with reversible recommendations such as binding the gateway to loopback, requiring auth, enabling updates, and verifying backups. - Use Case: You just deployed OpenClaw on a remote VPS. Use this Skill to audit SSH configuration, confirm the gateway is not publicly exposed, verify automatic security updates, and get a safe step-by-step lockdown plan. ## Quick Start Ask the assistant to run a security healthcheck on my OpenClaw host and recommend hardening steps.

Frequently Asked Questions about healthcheck

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit the security of my OpenClaw host?

Run read-only checks such as openclaw security audit --deep, openclaw gateway status --deep, and openclaw doctor, plus OS-level commands for firewall, listening ports, and updates. The Skill then reports findings by severity with a staged hardening plan.

How to harden SSH and firewall for a remote OpenClaw server?

First confirm your access path so you do not lock yourself out, then restrict public ports via the OS firewall, disable password SSH in favor of keys or MFA, and bind the gateway to loopback, LAN, or a tailnet. Every change is confirmed before applying.

Does the healthcheck work on macOS, Linux, and Windows?

Yes, it includes platform-specific read-only commands: socketfilterfw, pfctl, fdesetup, and tmutil on macOS; ufw, firewall-cmd, ss, and lsblk on Linux; and Get-NetFirewallProfile and Get-BitLockerVolume on Windows.

Will the security audit change my system settings automatically?

No. All initial checks are read-only, and the Skill asks permission before running them. Any state-changing action, especially SSH, firewall, or remote access changes, requires explicit confirmation and includes rollback notes.

What are the limitations of this host hardening approach?

It does not manage the OS firewall, SSH, or updates directly and only recommends actions when identity or role is unknown. Checks it cannot run are reported as gaps, and hardening depends on the user approving each step.