Openclaw Security Checklist

OpenClaw 部署前安全检查清单。聚焦合规导向的部署前检查（非事后加固），覆盖防火墙、SSH、API 密钥管理、数据出境合规、多部署场景验证。使用清单式检查，可逐项打勾并生成报告。适用于个人 Mac、VPS、Docker、企业部署场景。

This skill is internally consistent with being a deployment pre-check tool, but review and understand the scripts before running. Note the script will read system files (/etc/ssh/sshd_config), your ~/.openclaw workspace and environment variables to look for secrets — that is expected but can expose sensitive values if you redirect or share output. The script issues an external request to ipinfo.io to detect server country (this reveals your host IP/country to that service). Also ignore/avoid insecure example snippets in the docs that echo API keys into ~/.zshrc or logs; prefer secure secret stores. Recommended: inspect scripts locally, run them in a constrained/test environment first, and do not pipe or share the raw output if you suspect it may contain secrets.

Type: OpenClaw Skill Name: openclaw-security-checklist Version: 1.0.0 The bundle is a legitimate security auditing and compliance tool designed for OpenClaw deployments. The primary scripts, 'scripts/security-check.sh' and 'security-checklist.sh', perform local system inspections including firewall status, SSH configurations, API key storage permissions, and system update status. While the scripts use potentially sensitive commands like 'grep' to locate hardcoded API keys and 'curl' to check IP geolocation for data residency compliance, all findings are saved to local report files (e.g., '~/openclaw-security-report.txt') with no evidence of data exfiltration, persistence mechanisms, or malicious prompt injection.