Dont Hack Me

別駭我！基本安全檢測 — Security self-check for Clawdbot/Moltbot. Run a quick audit of your clawdbot.json to catch dangerous misconfigurations — exposed gateway, missing auth, open DM policy, weak tokens, loose file permissions. Auto-fix included. Invoke: "run a security check" or "幫我做安全檢查".

Install only if you want an agent to inspect your Clawdbot configuration. Invoke it with a specific request like "run dont-hack-me against my Clawdbot config," avoid sharing the full report if it includes secrets, and review each proposed fix before approving changes to auth, tokens, gateway bind, DM/group policy, or file permissions.

Type: OpenClaw Skill Name: dont-hack-me Version: 1.0.1 The skill performs a security self-check and auto-fix for the agent's own configuration file (`~/.clawdbot/clawdbot.json`). All actions, including reading the config, checking file permissions with `stat`, generating tokens with `openssl`, and modifying the config with `chmod`, are directly aligned with the stated purpose of auditing and hardening the agent's security. The skill explicitly instructs the agent to ask for user consent before applying any fixes and to back up the configuration file (`cp ~/.clawdbot/clawdbot.json ~/.clawdbot/clawdbot.json.bak`) before making changes. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection attempting to subvert the agent for harmful purposes.