healthcheck

Run read-only host discovery and OpenClaw security audits for hardening guidance.

Updated Feb 8, 2026
One-click install
npx skills add https://github.com/nomad3/openclaw-k8s --skill healthcheck-nomad3
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: healthcheck
Source: https://github.com/nomad3/openclaw-k8s/tree/main/package/skills/healthcheck
Command: npx skills add https://github.com/nomad3/openclaw-k8s --skill healthcheck-nomad3

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you assess and harden the host that runs OpenClaw while aligning changes to your chosen risk tolerance, without breaking your ability to access the system.

Core Features & Use Cases

  • Read-only host context discovery: Detects OS, privilege level, access path, exposure, OpenClaw gateway status, backup readiness, disk encryption, and security update posture to guide safe next steps.
  • OpenClaw security audits and update status: Runs OpenClaw security audits (including deep and optionally JSON output) and checks openclaw update status to surface configuration and risk signals.
  • Approval-gated remediation planning: Produces a step-by-step remediation plan with rollback and lockout-risk notes, then executes changes only with explicit confirmations (especially for firewall, ports, SSH/RDP, packages, services, persistence, and credentials).

Quick Start

Run the healthcheck Skill on your machine to perform read-only checks, audit OpenClaw security posture, show a remediation plan, and request approval before applying any hardening changes.

Frequently Asked Questions about healthcheck

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I harden SSH and firewall settings without losing remote access to my host?

Host hardening requires approval-gated remediation with explicit confirmation before changing firewall, ports, or SSH configurations. The process maintains access-preservation by generating rollback and verification steps, ensuring you avoid lockouts when securing remote gateways or VPS instances.

What does a read-only host security audit check for on a Linux VPS?

A read-only host security audit detects OS context, privilege level, exposure, OpenClaw gateway status, backup readiness, disk encryption, and security update posture. This discovery phase guides safe remediation steps without altering system state.

How do I schedule periodic security audits for OpenClaw deployments?

Schedule periodic audits using OpenClaw CLI commands for cron monitoring. This automates regular security checks and risk posture assessments, surfacing configuration signals and update status without requiring manual intervention.

What is the safest way to apply host hardening changes to a remote gateway?

The safest host hardening method produces a step-by-step remediation plan with lockout-risk notes, then executes changes only after explicit numbered user approvals. It prioritizes access-preservation with rollback steps before modifying firewall, SSH, or services.

Does OpenClaw security auditing support deep scans and JSON output?

Yes, OpenClaw security audits support deep scans and optionally output results in JSON format. This surfaces detailed configuration and risk signals, allowing you to assess your security posture and plan remediation accordingly.