Openclaw Security Audit

Run a local security audit on the OpenClaw environment, identifying risks, affected files, and prioritized remediation steps without exposing secrets.

This skill appears to do what it says: a local audit that inspects config, logs, workspace files, git history, SSH and firewall state, and secret-like patterns. Before running: (1) Review the bundled utils.py (not fully shown here) to confirm run_command/read/write behavior and ensure there are no hidden network POSTs or uploads. (2) Run it on a machine you control (not a sensitive production host) because it reads /etc, logs, and user files. (3) Run as a non-root user where possible; some host checks will be skipped if unreadable. (4) Inspect generated report files and their output directory permissions before sharing; while secrets are masked, file paths and counts are included. (5) If you enable autonomous agent invocation, be cautious — this tool can access many local artifacts; disable autonomous invocation unless you trust the skill and agent policies. If you want higher assurance, provide the full utils.py implementation for review or run the audit in an isolated test VM and inspect its runtime behavior (processes invoked, network activity) before using on production systems.

Type: OpenClaw Skill Name: openclaw-sec-audit Version: 0.1.3 The skill bundle is a legitimate security auditing tool designed to inspect the local OpenClaw environment for risks. It includes detectors for plaintext secrets (with explicit redaction logic in `utils.py`), overly permissive filesystem permissions, insecure SSH configurations, and exposed network listeners. The code in `audit.py` and its sub-modules performs standard system checks using `subprocess` and local file reads, but it contains no evidence of data exfiltration, obfuscation, or malicious intent.