Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
- Skill renamed to "moltbot-security" for clarity and improved discoverability. - Description and keywords updated to emphasize compatibility with Moltbot, OpenClaw, Cursor, Claude, and popular coding/AI tools. - Keywords expanded to improve search relevance for security, developer, and AI tool users. - No changes to core guides or technical instructions.
What This Skill Does
A configuration and hardening guide for OpenClaw and Moltbot AI agent gateways. Addresses publicly exposed gateways, which can leak API keys, conversation histories, and shell access to any internet scanner. Based on research that found 1,673+ exposed instances on Shodan.
It consolidates the most exploited gateway misconfigurations into a single audit command and config template, replacing ad-hoc research when deploying AI agents on cloud servers.
When to use it
- Locking down an OpenClaw gateway before exposing it beyond localhost
- Auditing an existing Moltbot setup for common misconfigurations
- Setting up Tailscale to access your AI agent remotely without opening a public port
- Hardening a cloud server running OpenClaw with UFW firewall rules
- Preventing prompt injection attacks that exfiltrate private conversation histories
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: audit my OpenClaw gateway and fix any security issues
- 1Runs `openclaw security audit --deep` to detect binding, auth, and permission issues
- 2Identifies gateway bound to all interfaces instead of loopback
- 3Applies `openclaw security audit --deep --fix` to correct file permissions and binding
- 4Generates a secure token with `openssl rand -hex 32` and writes it to the config
- 5Verifies the updated config matches the secure defaults template
Gateway rebound to loopback, auth token set, file permissions corrected to 600/700, mDNS broadcasting disabled
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.