Secucheck

Comprehensive security audit for OpenClaw. Scans 7 domains (runtime, channels, agents, cron, skills, sessions, network), supports 3 expertise levels, context-aware analysis, and visual dashboard. Read-only with localized reports.

What to check before installing or running secucheck: 1) Inspect scripts before execution — open scripts/full_audit.sh, serve_dashboard.sh, and all gather_*.sh to verify they only run read-only commands (ip/ss/netstat, reading ~/.openclaw config, etc.). Look specifically for network download commands (curl/wget), encoded payloads (base64, xxd), or destructive commands (rm -rf, dd, mkfs). 2) Confirm the dashboard binding behavior — examine serve_dashboard.sh to see which address it binds to (localhost vs 0.0.0.0 vs specific LAN IP) and which port it uses. If it binds to non-localhost, consider changing it to localhost or running it inside an isolated container/VM. 3) Review SKILL.md prompt text for the injection phrases flagged; remove or sanitize any language that could be interpreted by the agent as instruction overrides. Treat any embedded 'you are now' / 'ignore previous' style phrases as suspicious. 4) Run the skill in an isolated environment first (container or throwaway VM) and with no elevated privileges. Do not run it as root; the checks themselves warn of high risk when OpenClaw runs as root. Prefer a non-root account with read-only access to the OpenClaw config copy. 5) Verify provenance and metadata — the package has no homepage and source is unknown; confirm the author and repository, and resolve the internal version mismatch before trusting it in production. 6) If you want the report accessible remotely, explicitly consent and secure it (HTTPS, auth, or Tailscale). Avoid automatically advertising a LAN URL to users/devices that shouldn't access it. If you are unsure, mark this skill as untrusted until a manual code review is completed or ask the author for a signed release/source repository. Running audits is reasonable, but the mismatches and prompt-injection indicators mean you should not run this skill unattended on sensitive systems.

Type: OpenClaw Skill Name: secucheck Version: 2.8.0 The skill is designed for security auditing, requiring broad permissions. It declares `exec: true` in `skill.json` and uses it across multiple scripts to run system commands, including `sudo` for privilege checks. The `serve_dashboard.sh` script starts a Python HTTP server bound to `0.0.0.0` on port 8766, making the generated report accessible on the local network. While these capabilities are plausibly needed for a comprehensive security audit and the skill includes safeguards like redacting sensitive data and requiring explicit user confirmation for fixes, the presence of such high-risk capabilities without clear malicious intent falls under the 'suspicious' classification as per the defined threshold.