Audits and hardens OpenClaw host security against a user-defined risk tolerance.
npx skills add https://github.com/srgaba/open-claw --skill healthcheck-srgaba
Please help me install this Agent Skill. Skill: healthcheck Source: https://github.com/srgaba/open-claw/tree/main/project/skills/healthcheck Command: npx skills add https://github.com/srgaba/open-claw --skill healthcheck-srgaba
openclaw security audit --deep and openclaw update status. - Risk-profile-based hardening: Aligns the host to a chosen posture (Home/Workstation Balanced, VPS Hardened, Developer Convenience, or Custom) with staged, reversible remediation steps and explicit approval for every state-changing action. - Scheduled periodic audits: Sets up recurring openclaw cron jobs (e.g., healthcheck:security-audit) so security posture is re-checked automatically over time. - Use Case: A user running OpenClaw on a home server asks for a security review; the Skill checks listening ports and firewall rules, finds SSH open to the public internet, and walks them through key-only SSH and a deny-by-default firewall with rollback steps. ## Quick Start Ask the assistant to run a security healthcheck and hardening review on the machine running OpenClaw.High-intent search queries and answers about installing and using this skill.
Invoke the healthcheck skill, which runs `openclaw security audit --deep` along with OS-level checks for firewall status, listening ports, and updates. It then produces a remediation plan matched to your chosen risk profile before making any changes.
The skill offers to schedule recurring audits using `openclaw cron add` with stable job names like `healthcheck:security-audit`. You choose the cadence, time window, and output location, and it edits existing jobs instead of duplicating them.
No. OpenClaw's `--fix` flag only tightens OpenClaw's own defaults and file permissions; it never modifies host firewall, SSH, or OS update policies. Host-level hardening is done as separate steps, each requiring your explicit approval.
The workflow is designed to prevent lockouts: it confirms how you connect before touching remote access, uses staged reversible changes with rollback plans, and verifies access still works after each step. It stops and asks if anything unexpected occurs.
Four suggested profiles: Home/Workstation Balanced, VPS Hardened, Developer Convenience, and Custom. You can also skip profiles entirely and define your own requirements for open services, exposure, and update cadence.
hashSTACS-GlobalAudit OpenClaw host security and generate remediation plans.
Solitude01Automate host security hardening and risk-tolerance configuration for OpenClaw deployments.
zangxin75Monitors Clawdbot deployments for intrusions and anomalous credential usage.
CruxExpertsAutomate infrastructure provisioning and configuration management with Ansible playbooks and roles.