← Back to Skills Marketplace
454
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install openclaw-setup-guide
Description
Step-by-step 6-part guide to set up OpenClaw AI assistant on VPS with WhatsApp, Google OAuth, backups, security, automation, and verification.
Usage Guidance
This skill is essentially a pointer to an external, detailed production setup guide and is coherent with that purpose. Before using it: (1) Verify the URLs (github and hosted guide) are legitimate and served over HTTPS; (2) do not paste real secrets into chat—use placeholders when asking the agent for example commands; (3) when creating OAuth keys, API keys, Cloudflare tokens, and rclone crypt keys, apply least-privilege scopes and use ephemeral or limited credentials where possible; (4) keep keys off source control (chmod 600 as recommended) and store them in a secure secret manager; (5) consider testing the guide in a non-production/staging environment first; and (6) manually review any copy-pasteable scripts the guide links to before running them. The skill itself will not collect credentials, but the procedures it points to require careful handling of sensitive data.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-setup-guide
Version: 1.3.0
The skill bundle is classified as benign. It explicitly declares itself as 'instruction-only' with 'no code or scripts' in its metadata. The `SKILL.md` file serves solely to provide a description of an external OpenClaw setup guide and directs the AI agent to share the URL to this guide (https://aliahmadaziz.github.io/openclaw-guide/). There is no evidence of prompt injection attempts, malicious execution, data exfiltration, persistence mechanisms, or obfuscation within the provided files. While the external guide describes handling sensitive credentials, the skill bundle itself does not interact with them or instruct the agent to do so.
Capability Assessment
Purpose & Capability
The skill is an instruction-only production setup guide. The name/description align with the SKILL.md content (VPS, WhatsApp, Google OAuth, backups, hardening). It does not request unrelated binaries or environment variables.
Instruction Scope
SKILL.md instructs the agent to direct users to the external guide and provides an overview and security notice. The skill itself does not instruct the agent to read local files or access credentials, but the guide explicitly walks users through creating/storing many sensitive credentials (OAuth tokens, API keys, SSH keys, rclone crypt keys). That is expected for a production setup guide but raises operational risk when followed.
Install Mechanism
Instruction-only skill with no install spec and no code artifacts — nothing will be written or executed by installing the skill itself.
Credentials
The skill declares no required environment variables or credentials. However, the guide describes generating and storing multiple sensitive credentials (Anthropic API key, Google OAuth tokens, Cloudflare tunnel token, rclone crypt keys, SSH keys). These are reasonable for the described purpose but users should ensure they create least-privilege credentials and do not paste secrets into chat or public places.
Persistence & Privilege
always is false and the skill is user-invocable. There is no request to modify other skills or system-wide agent configuration or to persist credentials on the agent side.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-setup-guide - After installation, invoke the skill by name or use
/openclaw-setup-guide - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.3.0
Removed requires.env (ANTHROPIC_API_KEY) — the skill itself needs no credentials, it only points to an external guide. Credentials are documented as informational context, not agent requirements. Fixes scanner credential mismatch.
v1.2.0
Added YAML frontmatter with structured metadata: requires.env (ANTHROPIC_API_KEY), requires.credentials (Google OAuth, Cloudflare, WhatsApp, rclone, webhooks), requires.infrastructure (VPS, domain). Scope declared as instruction-only. Addresses ClawHub security scan credential transparency findings.
v1.1.0
Added explicit security & permissions notice declaring all credentials and sensitive actions the guide requires. Addresses ClawHub security scan transparency concern.
v1.0.0
OpenClaw Setup Guide skill released!
- Introduces a comprehensive 6-part guide for deploying OpenClaw on a VPS with production-grade features.
- Covers installation, WhatsApp integration, Google services setup, automated/encrypted backups, security hardening, and automation.
- Provides step-by-step instructions, copy-paste commands, and troubleshooting support.
- Includes clear prerequisites and verification checkpoints for each part.
- Directs users to the official OpenClaw setup site for the full guide.
Metadata
Frequently Asked Questions
What is OpenClaw Production Setup Guide?
Step-by-step 6-part guide to set up OpenClaw AI assistant on VPS with WhatsApp, Google OAuth, backups, security, automation, and verification. It is an AI Agent Skill for Claude Code / OpenClaw, with 454 downloads so far.
How do I install OpenClaw Production Setup Guide?
Run "/install openclaw-setup-guide" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenClaw Production Setup Guide free?
Yes, OpenClaw Production Setup Guide is completely free (open-source). You can download, install and use it at no cost.
Which platforms does OpenClaw Production Setup Guide support?
OpenClaw Production Setup Guide is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenClaw Production Setup Guide?
It is built and maintained by Ali Aziz (@aliahmadaziz); the current version is v1.3.0.
More Skills