Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Assesses and hardens the host machine running OpenClaw, aligning it to a user-defined risk tolerance. Covers firewall status, SSH configuration, disk encryption, OS update policy, and listening ports. Produces a remediation plan with exact commands, rollback steps, and optional periodic audit scheduling via OpenClaw cron.
Combines OpenClaw-specific audit commands with OS-level hardening steps in one guided workflow, with explicit approval gates before any state-changing action.
When to use it
- Running a security audit on a home workstation before granting OpenClaw full system access
- Hardening a Raspberry Pi configured as a headless OpenClaw gateway
- Reviewing open ports and firewall rules on a public-facing VPS
- Scheduling weekly automated security audits through OpenClaw cron
- Checking whether the installed OpenClaw version is current
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Check if my Mac running OpenClaw is secure and fix any issues
- 1Requests permission to run read-only checks, then runs uname, lsof for listening ports, firewall state, and tmutil for Time Machine status
- 2Runs openclaw security audit --deep and openclaw update status, reports findings
- 3Presents numbered risk profiles (Home/Workstation Balanced, VPS Hardened, Developer Convenience, Custom) and asks user to select one
- 4Produces a remediation plan showing current posture, gaps, exact commands, access-preservation strategy, and rollback notes
- 5Executes each approved step with per-step confirmation, then re-runs the audit and delivers a final posture report
Final posture report with firewall status, open ports, OpenClaw audit results, update channel status, and an offer to schedule periodic audits via openclaw cron add