← 返回 Skills 市场

Doctorbot Healthcheck Free

Name: Doctorbot Healthcheck Free
Author: bamontejano

作者 bamontejano · GitHub ↗ · v0.1.0

cross-platform ⚠ suspicious

865

总下载

当前安装

版本数

在 OpenClaw 中安装

/install skill-doctorbot-healthcheck-free

功能描述

🩺 Free Security & Health Audit. Your OpenClaw deserves a check-up. This skill performs a non-invasive scan to detect security risks, outdated software, and misconfigurations.

使用说明 (SKILL.md)

DoctorBot: HealthCheck (Free Edition) 🛡️

Is your OpenClaw host secure? Let's find out.

This skill performs a read-only security and health audit of the machine running OpenClaw. It's 100% non-invasive and will not make any changes to your system.

🚀 Free Features

OpenClaw Security Audit: Runs openclaw security audit --deep to find vulnerabilities in your OpenClaw setup.
Update Status: Checks if your OpenClaw is outdated with openclaw update status.
Firewall & Ports Scan: Scans your host's firewall status (ufw, firewalld) and lists open ports.
System Vitals: Basic check of OS version and running services.

🛠️ Usage

Simply tell your agent: "Run a health check."

The skill will guide you through the process and deliver a simple report with a "System Health Score".

upgrading_to_pro

🩺 Upgrade to DoctorBot: HealthCheck Pro

Did your free scan find critical issues? The Pro version can automatically fix them.

Pro Features:

Auto-Fix: Automatically hardens your system based on security best practices.
Firewall Management: Closes unnecessary ports.
SSH Hardening: Disables password login, enforces key-only access.
Scheduled Audits: Runs checks daily or weekly and alerts you of new risks.

To upgrade, find DoctorBot: HealthCheck Pro on ClawHub.

Maintained by DoctorBot-x402. For a healthy agent ecosystem.

安全使用建议

This skill appears to be a read-only local audit and is instruction-only (no code installed). Before installing or running it, confirm: 1) whether the host has the referenced 'openclaw' CLI and other utilities the skill will run; 2) whether the 'openclaw security audit --deep' command requires sudo and what files it reads or transmits; 3) where the audit results are stored or whether they are sent off-host; and 4) that the agent will ask for your explicit consent before running any privileged actions. If you want safer usage, run the commands yourself interactively (or in a restricted environment) first, and avoid allowing automatic 'Pro' auto-fix actions without backups and explicit, per-action confirmation.

功能分析

Type: OpenClaw Skill Name: skill-doctorbot-healthcheck-free Version: 0.1.0 The skill explicitly states it performs a "read-only" and "non-invasive" security and health audit. All described "Free Features" in SKILL.md, such as running `openclaw security audit`, checking update status, scanning firewall/ports, and system vitals, are consistent with read-only operations. While the document mentions "Pro Features" that include system hardening and firewall management, these are clearly presented as features of a separate, paid version and not instructions for the current skill, mitigating prompt injection concerns. No evidence of data exfiltration, malicious execution, persistence, or obfuscation was found.

能力评估

ℹ Purpose & Capability

The name and description claim a local, read-only security audit and the SKILL.md lists commands consistent with that (openclaw security audit, update status, firewall/ports, OS/services). However the skill declares no required binaries or environment variables even though it expects an 'openclaw' CLI and may call system utilities (ufw, firewalld, port-listing tools). The omission of required binaries is a minor incoherence.

⚠ Instruction Scope

Instructions instruct the agent to run system-level commands (audit, firewall checks, port listings, OS/service queries). The SKILL.md repeatedly asserts the scan is 'read-only' and 'non-invasive' but does not describe: (a) whether any data leaves the host or is uploaded to an external service, (b) whether elevated privileges (sudo) are required for the 'deep' audit or firewall inspection, or (c) explicit confirmation prompts before running actions. The guidance 'The skill will guide you through the process' is vague and grants broad discretion to the agent.

✓ Install Mechanism

This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by the skill itself. That minimizes install-time risk.

ℹ Credentials

The skill requests no environment variables or credentials, which is appropriate for a local audit. That said, it implicitly requires local CLI tools (openclaw, ufw/firewalld or equivalents) but those are not declared — the missing declaration should be clarified.

✓ Persistence & Privilege

always is false and the skill is not requesting persistent elevated privileges. Autonomous agent invocation is allowed (platform default) but the skill does not request special persistence.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install skill-doctorbot-healthcheck-free
安装完成后，直接呼叫该 Skill 的名称或使用 /skill-doctorbot-healthcheck-free 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.0

Initial public release. - Provides a free, read-only security and health audit for OpenClaw hosts. - Detects vulnerabilities, outdated software, and misconfigurations without making changes. - Checks update status, firewall configuration, open ports, OS version, and running services. - Generates a simple System Health Score report. - Promotes an upgrade path to a Pro version with automated fixes and advanced features.

元数据

Slug skill-doctorbot-healthcheck-free

版本 0.1.0

许可证 —

累计安装 2

当前安装数 2

历史版本数 1

常见问题