File contents Healthcheck Skill
Description
Host security hardening and system health checks for OpenClaw deployments.
Triggers
"security audit", "check security", "healthcheck", "system health"
"check ports", "check firewall", "vulnerability scan"
"security patrol", "аудит безопасности", "проверь безопасность"
Instructions
Quick Health Check
Run openclaw doctor — check for errors
Check open ports: lsof -i -P | grep LISTEN
Verify gateway binds to 127.0.0.1 (not 0.0.0.0)
Check disk space: df -h
Check memory: vm_stat (macOS) or free -m (Linux)
Security Audit
Ports: lsof -i -P | grep LISTEN — flag anything on 0.0.0.0Tokens: grep -r "sk-ant-\|sk-proj-\|AAEO" ~/.openclaw/ --include="*.json" -l | grep -v ".env" — tokens should only be in .envSSH: Check ~/.ssh/authorized_keys for unknown keysUpdates: softwareupdate -l (macOS) or apt list --upgradable (Linux)Git: git status in workspace — uncommitted sensitive files?Firewall: macOS: defaults read /Library/Preferences/com.apple.alf globalstate; Linux: ufw statusLaunchAgents: ls ~/Library/LaunchAgents/ — compare count to etalon in MEMORY.md, flag unknown plist filesFile permissions: stat -f "%OLp" ~/.openclaw/openclaw.json ~/.openclaw/.env — both must be 600Docker: docker ps — expected containers running?
Report Format
## Security Report — YYYY-MM-DD
- Ports: ✅/❌ [details]
- Tokens: ✅/❌
- SSH: ✅/❌
- Updates: ✅/❌
- Git: ✅/❌
- Firewall: ✅/❌
- LaunchAgents: ✅/❌ [count vs etalon]
- File permissions: ✅/❌
- Docker: ✅/❌
- Overall: PASS / FAIL
On FAIL
message(action=send, channel=telegram, to={{OWNER_TELEGRAM_ID}},
message="🚨 SECURITY REPORT FAIL:\n[items that failed]\nAction needed: [what to do]")
1 --- 2 name: healthcheck 3 description: Healthcheck Skill 4 --- 5 # Healthcheck Skill 6 7 ## Description 8 Host security hardening and system health checks for OpenClaw deployments. 9 10 ## Triggers 11 - "security audit", "check security", "healthcheck", "system health" 12 - "check ports", "check firewall", "vulnerability scan" 13 - "security patrol", "аудит безопасности", "проверь безопасность" 14 15 ## Instructions 16 17 ### Quick Health Check 18 1. Run `openclaw doctor` — check for errors 19 2. Check open ports: `lsof -i -P | grep LISTEN` 20 3. Verify gateway binds to 127.0.0.1 (not 0.0.0.0) 21 4. Check disk space: `df -h` 22 5. Check memory: `vm_stat` (macOS) or `free -m` (Linux) 23 24 ### Security Audit 25 26 1. **Ports:** `lsof -i -P | grep LISTEN` — flag anything on 0.0.0.0 27 2. **Tokens:** `grep -r "sk-ant-\|sk-proj-\|AAEO" ~/.openclaw/ --include="*.json" -l | grep -v ".env"` — tokens should only be in .env 28 3. **SSH:** Check `~/.ssh/authorized_keys` for unknown keys 29 4. **Updates:** `softwareupdate -l` (macOS) or `apt list --upgradable` (Linux) 30 5. **Git:** `git status` in workspace — uncommitted sensitive files? 31 6. **Firewall:** macOS: `defaults read /Library/Preferences/com.apple.alf globalstate`; Linux: `ufw status` 32 7. **LaunchAgents:** `ls ~/Library/LaunchAgents/` — compare count to etalon in MEMORY.md, flag unknown plist files 33 8. **File permissions:** `stat -f "%OLp" ~/.openclaw/openclaw.json ~/.openclaw/.env` — both must be 600 34 9. **Docker:** `docker ps` — expected containers running? 35 36 ### Report Format 37 ``` 38 ## Security Report — YYYY-MM-DD 39 - Ports: ✅/❌ [details] 40 - Tokens: ✅/❌ 41 - SSH: ✅/❌ 42 - Updates: ✅/❌ 43 - Git: ✅/❌ 44 - Firewall: ✅/❌ 45 - LaunchAgents: ✅/❌ [count vs etalon] 46 - File permissions: ✅/❌ 47 - Docker: ✅/❌ 48 - Overall: PASS / FAIL 49 ``` 50 51 ### On FAIL 52 ``` 53 message(action=send, channel=telegram, to={{OWNER_TELEGRAM_ID}}, 54 message="🚨 SECURITY REPORT FAIL:\n[items that failed]\nAction needed: [what to do]") 55 ```
commit 3830cc9a7f
Frequently asked questions How do I install the Healthcheck skill? Run npx skillmds@latest add alekseiul/healthcheck in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
What does the Healthcheck skill do? Healthcheck Skill It is listed under Coding & Dev Tools on SkillMD.
Is Healthcheck safe to use? This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
Which AI agents work with Healthcheck? This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Is Healthcheck free to use? Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
Who published Healthcheck? AlekseiUL (@alekseiul) published this skill. Their other Agent Skills are listed on their SkillMD profile.
AlekseiUL