Setup & Installation
openclaw skills install @poolguy24/skillsentry
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
npx clawhub install skillsentry
What This Skill Does
Audits a local OpenClaw install for security vulnerabilities and prompt-injection indicators. Scans gateway configurations, open ports, and known injection patterns, then outputs a JSON report. Can be scheduled to run on a recurring cadence via cron.
Combines OpenClaw-specific prompt-injection detection with general vulnerability scanning in one tool, which generic security scripts don't provide.
When to use it
- Auditing an OpenClaw install after adding new skills
- Detecting prompt-injection patterns in agent interactions
- Scheduling daily automated security checks via cron
- Identifying unexpected open ports on a local setup
- Reviewing security posture before sharing or deploying an install
Example Workflow
Here's how your AI assistant might use this skill in practice.
INPUT
User asks: Run a security audit on my OpenClaw install
AGENT
- 1Launch the panel server with `node scripts/panel-server.js`
- 2Open the scan UI at http://localhost:8133
- 3Run `bash scripts/audit.sh` to execute the audit
- 4Review JSON output for prompt-injection hits or unexpected open ports
OUTPUT
JSON report listing detected vulnerabilities, open ports, and any prompt-injection pattern matches, stored at logs/last-report.json