healthcheck

Audit host security and generate risk-tolerant remediation plans for OpenClaw deployments.

Updated Apr 8, 2026
One-click install
npx skills add https://github.com/JOHNNYWHITEMIKE/openclaw --skill healthcheck-johnnywhitemike
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: healthcheck
Source: https://github.com/JOHNNYWHITEMIKE/openclaw/tree/main/openclaw/.openclaw/openclaw/skills/healthcheck
Command: npx skills add https://github.com/JOHNNYWHITEMIKE/openclaw --skill healthcheck-johnnywhitemike

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you assess and harden the host running OpenClaw while tuning the machine’s security posture to your chosen risk tolerance without accidentally locking you out or breaking connectivity.

Core Features & Use Cases

  • Host context discovery: Infers OS, privilege level, access path, network exposure, OpenClaw gateway bind/listening status, backup readiness, disk encryption, and automatic security update status to guide recommendations safely.
  • Read-only security audits and update checks: Runs OpenClaw security audits in safe modes (including deep and JSON options) and checks OpenClaw update/version status before proposing changes.
  • Risk-tolerant remediation planning: Produces a staged remediation plan with exact commands, rollback/access preservation strategy, lockout risk notes, and explicit confirmations for any state-changing actions.
  • Optional scheduling for ongoing verification: Prompts to schedule periodic audits and version checks via the OpenClaw cron tooling after initial hardening.

Quick Start

Use the healthcheck skill to perform read-only host context checks, run an OpenClaw deep security audit, check update status, and then generate a remediation plan tailored to your risk tolerance.

Frequently Asked Questions about healthcheck

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I harden SSH and firewall settings without losing remote access to my host?

Host hardening without losing access is achieved by running read-only environment audits first, then generating a staged remediation plan with explicit lockout risk notes and access preservation rollback strategies before applying any firewall or SSH changes.

Can I run security audits and update checks on OpenClaw VPS and single-board computer deployments?

Security audits and update checks are supported across OpenClaw deployments on laptops, workstations, single-board computers, and VPSes by inferring OS context, network exposure, and privilege level to safely guide host hardening.

What is the best way to schedule periodic security health verification for OpenClaw hosts?

Periodic security health verification is best scheduled using OpenClaw cron tooling, which automates recurring host audits and update version checks after the initial risk-tolerant hardening remediation plan is applied.

Does OpenClaw security hardening support read-only audits before making system changes?

OpenClaw security hardening enforces read-only-first behavior by collecting environment context and running deep security audits in safe modes, requiring explicit user approvals before executing any state-changing remediation commands.

How do I align OS and OpenClaw security posture with my specific risk tolerance?

Risk-tolerant alignment is performed by assessing host disk encryption, backup readiness, and automatic update status, then producing a tailored remediation plan that matches your exact security posture requirements.

Why does firewall review or SSH hardening sometimes lock me out of my server?

Lockouts during SSH hardening or firewall review happen when changes bypass access preservation strategies; this is mitigated by generating staged remediation plans with rollback commands and explicit confirmations prior to state-changing execution.