Secure and Monitor Operations
Developer & Ops
Scan
Protect
Monitor
Run security scans against your code and infrastructure, manage passwords and secrets properly, and set up monitoring so you know when something breaks. Not a replacement for a security team, but a good starting point.
Useful for
- You know you should be scanning for vulnerabilities but never get around to it
- You have API keys and passwords scattered across env files and need to clean that up
- You want basic monitoring and alerting without setting up a full observability stack
Suggested Skills
Pick skills from the phases below based on what you need. Each phase has an example prompt you can copy and try with your agent.
Scan skills find vulnerabilities in your code and infrastructure. Protect skills manage passwords, secrets, and access. Monitor skills watch your services and alert you when things go wrong.
Scan
Find vulnerabilities before someone else does.
try in your OpenClaw assistant
Run a security scan against my web app. Check for common vulnerabilities, exposed ports, and SSL issues.
First review and use these skills:
https://clawskills.sh/skills/thesethrose-clawdbot-security-check
Protect
Lock down secrets and manage access properly.
try in your OpenClaw assistant
Scan my codebase for hardcoded API keys, move them to a vault, and set up proper secret management.
Monitor
Watch your services and catch problems early.
try in your OpenClaw assistant
Check if my SSL certificates are expiring soon, verify my services are up, and scan for any new security issues.