Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Audits and hardens OpenClaw configuration files for security issues. Scans openclaw.json for exposed credentials, insecure gateway settings, overly permissive exec rules, and missing best practices. Produces a scored report and can auto-fix issues with a backup.
Combines detection and remediation in one tool, so issues found during audit can be fixed immediately without manually editing config files.
When to use it
- Auditing an OpenClaw deployment before moving to production
- Finding API keys accidentally committed to openclaw.json
- Tightening exec sandbox permissions on a shared machine
- Generating a security report for a team review
- Fixing file permission issues on config files
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: audit my OpenClaw config and fix any issues
- 1Runs `python scripts/hardener.py audit` against openclaw.json
- 2Identifies critical issues: exposed API keys and insecure file permissions
- 3Creates a backup of the current config
- 4Runs `python scripts/hardener.py fix` to auto-remediate detected issues
- 5Generates a security report with `python scripts/hardener.py report`
Security score raised from 55/100 to 88/100, exposed keys moved to .env, file permissions corrected to 600, report saved to security-report.md