agentskillexchange Audit OpenClaw host security posture and hardening gaps
This skill uses OpenClaw's healthcheck workflow to inspect the host running the assistant, surface risky exposure, and turn the findings into a staged hardening plan. It is for operator-style audits with explicit approval gates, not a generic software listing or a replacement for OS administration.
Prerequisites
OpenClaw CLI
Installation
Use the upstream install or setup path that matches your environment:
- npm install -g openclaw@latest
- Use pnpm for source checkouts. The repository is a pnpm workspace, and bundled
- git clone https://github.com/openclaw/openclaw.git
- pnpm install
Requirements and caveats from upstream:
- Runtime: Node 24 (recommended) or Node 22.19+.
- Public inbound DMs require an explicit opt-in: set dmPolicy="open" and include "*" in the channel allowlist (allowFrom / channels.discord.allowFrom / channels.slack.allowFrom; legacy: channels.discord.dm.allowFrom, ch...
- Group/channel safety: set agents.defaults.sandbox.mode: "non-main" to run non-main sessions inside sandboxes. Docker is the default sandbox backend; SSH and OpenShell backends are also available.
Basic usage or getting-started notes:
OpenClaw is a personal AI assistant you run on your own devices.
Website · Docs · Vision · DeepWiki · Getting Started · [Updat...
New install? Start here: Getting started
Source: https://github.com/openclaw/openclaw/tree/main/skills/healthcheck
Extracted from upstream docs: https://raw.githubusercontent.com/openclaw/openclaw/HEAD/README.md