SecurityVitals

Security vitals checker for OpenClaw. Scans your installation, scores your setup, and shows you exactly what to fix. First scan in seconds.

This skill appears to do exactly what it says: run a local OpenClaw audit/health/version check and report a constrained set of fields. Before installing or running it: (1) ensure you trust the installed openclaw CLI because `openclaw update status` may contact OpenClaw's update registry; (2) run scans as a user with least privilege — some health probe error strings could include diagnostic data, so avoid running in an environment where that output would expose secrets; and (3) note that the clawvitals.io dashboard and plugin are separate — this skill is stateless and does not send scan data to that dashboard by itself. If you need extra assurance, inspect the OpenClaw audit/health outputs locally to confirm nothing sensitive would be exposed by the limited fields the skill extracts.

Type: OpenClaw Skill Name: securityvitals Version: 1.4.8 The securityvitals (ClawVitals) skill is a security auditing tool designed to scan OpenClaw installations. It operates by executing a specific set of local CLI commands (`openclaw security audit`, `openclaw health`, `openclaw update status`, etc.) and parsing their JSON output to generate a security score and remediation report. The skill instructions in `SKILL.md` explicitly forbid the storage or display of sensitive credentials and secrets. It requests no network permissions, although it notes that the `openclaw update status` command may trigger the CLI's native update check. The code and instructions are transparent, aligned with the stated purpose, and contain no indicators of malicious intent or data exfiltration.