setup-auditor

Audit OpenClaw environments for credential leaks and unsafe configurations.

Updated Mar 15, 2026
One-click install
npx skills add https://github.com/wongdean/knowledge-base --skill setup-auditor-wongdean
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: setup-auditor
Source: https://github.com/wongdean/knowledge-base/tree/main/backups/openclaw-config/20260315_232439/workspace-skills/setup-auditor
Command: npx skills add https://github.com/wongdean/knowledge-base --skill setup-auditor-wongdean

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you ensure your OpenClaw environment is secure by auditing for credential leaks, unsafe default configurations, and missing sandbox protections, reducing the risk of unauthorized access or data breaches.

Core Features & Use Cases

  • Credential Leak Detection: Scans your workspace for exposed secrets like API keys and passwords.
  • Configuration Hardening: Reviews OpenClaw and host agent settings for security best practices.
  • Sandbox Readiness: Assesses your setup for running untrusted code in isolated environments.
  • Persistence Check: Identifies potential signs of prior system compromise.
  • Use Case: Before deploying a new skill that requires network access, run this auditor to confirm your environment's security posture and receive a clear checklist of any necessary fixes.

Quick Start

Run the setup-auditor skill to check my current OpenClaw environment for security risks.

Frequently Asked Questions about setup-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my environment for exposed credentials and unsafe defaults?

To audit your environment for exposed credentials and unsafe defaults, run a wizard-style security scanner that checks for leaked API keys, passwords, and risky configurations, then generates a detailed fix checklist to harden your setup.

What is sandbox readiness assessment for running untrusted code?

Sandbox readiness assessment evaluates your host setup to determine if untrusted code can run in isolated environments safely. It checks for missing sandbox configurations to prevent unauthorized system access and reduce the risk of data breaches.

Can I check my OpenClaw configuration for security best practices before deployment?

Yes, you can check your OpenClaw configuration for security best practices before deployment. A configuration hardening review analyzes your host agent settings and identifies unsafe defaults, producing a clear checklist of necessary security fixes.

How does a persistence check identify signs of system compromise?

A persistence check identifies signs of system compromise by scanning for unauthorized configurations that allow malicious access to survive reboots. It flags potential indicators of prior breaches to help secure your host environment.

Do I need to manually configure anything to scan my workspace for leaked secrets?

You do not need to manually configure complex settings to scan for leaked secrets. The auditor operates in a wizard-style flow, collecting basic input about your setup to automatically detect exposed API keys and passwords.

What are the limitations of automated credential scanning in a development environment?

Automated credential scanning limitations include relying on known patterns to detect exposed API keys and passwords, meaning it may miss obfuscated secrets. It provides a fix checklist but requires manual intervention to resolve complex configuration issues.