setup-auditor

Auditing your OpenClaw environment involves scanning workspaces, agent configurations, and persistence mechanisms to detect credential leaks, insecure configurations, and missing sandbox isolation, producing a detailed report with actionable remediation steps to harden your setup.

Checking for exposed credentials involves running a credential scan across your workspace to detect leaked secrets, then applying the actionable remediation steps from the generated security report to remove the exposed sensitive data.

Sandbox isolation separates untrusted skill execution from your core system, and you verify readiness by checking your environment configurations to ensure untrusted skills run safely in isolation without exposing sensitive data.

You should run a security audit on your agent configurations before running any new skill that requires file access, ensuring your environment is secure and your sensitive data will not be exposed during execution.

Detecting unauthorized modifications requires running a persistence check that scans your OpenClaw setup for signs of backdoors, then reviewing the security report to identify and remove any anomalous persistence mechanisms.

The security audit requires no external dependencies or tools to run, operating independently to scan your OpenClaw workspaces and agent configurations and generate a detailed checklist of security improvements.