← Back to Skills Marketplace
553
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install openclaw-security-policy-check
Description
Automates security audits for OpenClaw gateway by checking key configuration settings to identify and report common security risks.
Usage Guidance
This skill appears to do what it claims: read your OpenClaw config (~/.openclaw/openclaw.json), report insecure settings, and invoke the local 'openclaw security audit --deep'. Before installing/running: (1) verify you trust the skill source (no homepage and unknown owner in metadata); (2) note the metadata did not declare the required 'openclaw' binary—ensure that CLI is the official one you trust; (3) back up your config file as advised; (4) understand that while this script does not exfiltrate data itself, the OpenClaw CLI it calls could perform network actions depending on its implementation, so review/confirm the CLI behavior if network confidentiality is a concern. If you cannot verify the author, review the included script contents (they are short and readable) before running.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-security-policy-check
Version: 0.1.0
The skill bundle is a security audit tool designed to check OpenClaw gateway configurations for common risks. The script `scripts/audit.cjs` reads the local configuration file (`~/.openclaw/openclaw.json`), identifies insecure settings (such as weak tokens or broad network bindings), and executes a legitimate system command (`openclaw security audit --deep`) to provide a report. It does not exfiltrate data, masks sensitive tokens in its output, and contains no evidence of malicious intent or obfuscation.
Capability Assessment
Purpose & Capability
Overall coherent: the name/description, SKILL.md and script all focus on auditing OpenClaw configuration. Minor inconsistency: the registry metadata declares no required binaries, but both SKILL.md and the script explicitly require the local 'openclaw' CLI to be installed and executable.
Instruction Scope
Runtime instructions and the script only read the user's OpenClaw config at ~/.openclaw/openclaw.json, perform local checks, print a report, and run 'openclaw security audit --deep'. There is no code that reads unrelated system paths or environment variables, nor does the script itself transmit data to external endpoints.
Install Mechanism
No install spec — instruction-only plus a local script. Nothing is downloaded or written during install; the single included script is executed by the user/agent.
Credentials
No environment variables, secrets, or external credentials are requested. The script reads only the gateway config file (appropriate for an audit tool) and masks tokens in reports; this access is proportionate to the stated purpose.
Persistence & Privilege
Does not request persistent/always-on privileges and does not modify other skills or system-wide agent settings. It only runs on user invocation (or autonomous invocation if allowed by the platform) and performs read-only checks plus invoking the local OpenClaw CLI.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-security-policy-check - After installation, invoke the skill by name or use
/openclaw-security-policy-check - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of OpenClaw Security Policy Check
- Automates security audits for OpenClaw gateway configurations.
- Checks five critical security settings and flags unsafe values.
- Reads configuration from ~/.openclaw/openclaw.json automatically.
- Generates audit reports with findings and recommended fixes.
- Designed for routine inspections, pre-deployment hardening, and risk detection.
Metadata
Frequently Asked Questions
What is OpenClaw Security Audit?
Automates security audits for OpenClaw gateway by checking key configuration settings to identify and report common security risks. It is an AI Agent Skill for Claude Code / OpenClaw, with 553 downloads so far.
How do I install OpenClaw Security Audit?
Run "/install openclaw-security-policy-check" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenClaw Security Audit free?
Yes, OpenClaw Security Audit is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does OpenClaw Security Audit support?
OpenClaw Security Audit is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenClaw Security Audit?
It is built and maintained by ASantsSec (@asantssec); the current version is v0.1.0.
More Skills