healthcheck

Audit and harden hosts running OpenClaw against a user-defined risk tolerance.

Updated Feb 16, 2026
One-click install
npx skills add https://github.com/travis-burmaster/agentbox --skill healthcheck-travis-burmaster
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: healthcheck
Source: https://github.com/travis-burmaster/agentbox/tree/main/agentfork/skills/healthcheck
Command: npx skills add https://github.com/travis-burmaster/agentbox --skill healthcheck-travis-burmaster

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Machines running OpenClaw often ship with default firewall, SSH, and update settings that leave the host exposed, and users lack a structured way to assess and fix their security posture without locking themselves out. ## Core Features & Use Cases - Read-only security assessment: Runs OpenClaw security audits, version checks, and OS-level checks (firewall, listening ports, backups, disk encryption) to build a current posture summary. - Risk-aligned remediation plans: Produces step-by-step hardening plans matched to profiles like Home/Workstation Balanced or VPS Hardened, with rollback and access-preservation strategies. - Scheduled periodic audits: Configures OpenClaw cron jobs for recurring security audits and update status checks with stable job names. - Use Case: A user running OpenClaw on a VPS asks for a security review; the Skill audits the host, proposes a deny-by-default firewall with key-only SSH, and schedules weekly audits after approval. ## Quick Start Ask the agent to run a security healthcheck on this machine and recommend hardening steps based on my risk tolerance.

Frequently Asked Questions about healthcheck

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on a machine running OpenClaw?

Run openclaw security audit for a fast check or openclaw security audit --deep for a thorough probe. The Skill runs these read-only audits by default after you grant permission, then summarizes gaps against your chosen risk profile.

How do I harden SSH and firewall settings on an OpenClaw host?

The Skill produces a step-by-step remediation plan with exact commands for firewall rules, key-only SSH, and disabling root login based on your risk profile. Every change requires explicit approval and includes rollback steps to prevent lockout.

Does OpenClaw change my host firewall or SSH configuration?

No, OpenClaw never modifies host firewall, SSH, or OS update policies. The openclaw security audit --fix command only tightens OpenClaw's own defaults and file permissions; OS hardening is a separate, explicitly approved set of steps.

Can I schedule periodic security audits with OpenClaw cron?

Yes, the Skill can schedule recurring audits using openclaw cron add with stable job names like healthcheck:security-audit. Scheduling always requires your explicit approval, and you choose the cadence, time window, and output location.

What risk profiles does the healthcheck support?

It offers Home/Workstation Balanced, VPS Hardened, Developer Convenience, and Custom profiles. You can also define your own constraints for services, exposure, and update cadence instead of picking a preset.