Security Monitor Deploy

Comprehensive security audit for OpenClaw deployments. Checks Docker port bindings, SSH config, openclaw.json settings, file permissions, exposed services, a...

This skill appears to do what it says: a local security audit. Before installing or running it: 1) Review the entire scripts/security_audit.sh file yourself (the provided content was truncated in the review). 2) Run it on a non-production or disposable system first (or inside an isolated container/VM) so you don't expose real secrets during testing. 3) Note it inspects /var/run/docker.sock and may run docker inspect/ps — if your Docker containers hold secrets in environment variables, the audit may see them. 4) Confirm you trust the unknown publisher/homepage; if unsure, ask for source provenance or run the script under restricted privileges. 5) If you need higher assurance, have someone with shell experience audit the remainder of the script for any unexpected network calls, obfuscated behavior, or commands that read or transmit file contents.

Type: OpenClaw Skill Name: security-monitor-deploy Version: 1.0.0 The OpenClaw AgentSkills bundle 'security-monitor-deploy' is a security auditing tool. The `SKILL.md` documentation clearly outlines its purpose to perform comprehensive security checks on Docker, SSH, network, file permissions, and OpenClaw configurations. The `scripts/security_audit.sh` script implements these checks by inspecting system configurations, Docker settings, network services, and file permissions using standard system utilities (e.g., `docker`, `grep`, `stat`, `find`, `ss`, `python3` for JSON parsing). While the script requires significant system access to perform its audit functions, all actions are directly aligned with its stated purpose of identifying security vulnerabilities, not exploiting them or exfiltrating data. There is no evidence of malicious intent, data exfiltration, persistence mechanisms, obfuscation, or prompt injection attempts against the agent.