How do I install the Security Monitor skill?

Run npx skillmds@latest add modbender/security-monitor-2 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Security Monitor safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: CAUTION, Skill Scanner: PASS. Capability flags: executes scripts, makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Security Monitor?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Security Monitor free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

Who published Security Monitor?

modbender (@modbender) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Security Monitor by modbender — Agent Skill

Name: Security Monitor
Rating: 4.5 (4 reviews)
Author: modbender

Security Monitor

Comprehensive security audit for OpenClaw deployments. Checks Docker port bindings, SSH config, openclaw.json settings, file permissions, exposed services, and firewall rules. Scores your deployment 0-100 with actionable recommendations. Use for security hardening and compliance checks.

modbender Updated Sep 22, 2026 12 repo stars

File contents

Security Monitor 🛡️

Comprehensive security audit for OpenClaw deployments.

Scans your Docker configuration, SSH settings, firewall rules, OpenClaw config, and file permissions. Produces a security score (0-100) with actionable recommendations.

Quick Start

# Run full audit
bash {baseDir}/scripts/security_audit.sh

# JSON output
bash {baseDir}/scripts/security_audit.sh --json

# Specific checks only
bash {baseDir}/scripts/security_audit.sh --check docker
bash {baseDir}/scripts/security_audit.sh --check ssh
bash {baseDir}/scripts/security_audit.sh --check config
bash {baseDir}/scripts/security_audit.sh --check files
bash {baseDir}/scripts/security_audit.sh --check network

What It Checks

OpenClaw Config (25 points)

allowInsecureAuth must be false
dmPolicy must not be open/allow-all
Port bindings must use 127.0.0.1
API keys not hardcoded in config
Secure model permissions

Docker Security (25 points)

All port bindings use 127.0.0.1 (not 0.0.0.0)
No privileged containers (except necessary)
Docker socket permissions
Container resource limits
No --net=host unless needed

SSH Configuration (20 points)

Root login disabled (PermitRootLogin no)
Password authentication disabled
Key-based auth only
Non-standard port (bonus)
Fail2ban or similar active

Network & Services (15 points)

No unnecessary exposed ports
Firewall active (ufw/iptables)
Only expected services listening
HTTPS/TLS termination configured

File Permissions (15 points)

openclaw.json not world-readable
SSH keys proper permissions (600)
.env files not world-readable
Docker socket permissions
No sensitive files in /tmp

Scoring

Score	Rating	Meaning
90-100	🟢 Excellent	Production-ready
70-89	🟡 Good	Minor improvements needed
50-69	🟠 Fair	Several issues to address
0-49	🔴 Critical	Immediate action required

Output Example

═══ Security Audit Report ═══
Date: 2026-02-15 00:30:00

[CONFIG] ✅ allowInsecureAuth: false
[CONFIG] ✅ dmPolicy: allowlist
[CONFIG] ✅ Ports bound to 127.0.0.1
[DOCKER] ✅ All containers bind to 127.0.0.1
[DOCKER] ⚠️  No resource limits on openclaw container
[SSH]    ✅ Root login disabled
[SSH]    ✅ Password auth disabled
[NET]    ✅ UFW active
[FILES]  ✅ Config file permissions OK

Score: 92/100 — 🟢 Excellent
Issues: 1 warning

Recommendations:
  1. Add resource limits to Docker containers

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation

---name: security-monitor-2description: Comprehensive security audit for OpenClaw deployments. Checks Docker port bindings, SSH config, openclaw.json settings, file permissions, exposed services, and firewall rules. Scores your deployment 0-100 with actionable recommendations. Use for security hardening and compliance checks.license: MIT---# Security Monitor 🛡️**Comprehensive security audit for OpenClaw deployments.**Scans your Docker configuration, SSH settings, firewall rules, OpenClaw config, and file permissions. Produces a security score (0-100) with actionable recommendations.## Quick Start```bash# Run full auditbash {baseDir}/scripts/security_audit.sh# JSON outputbash {baseDir}/scripts/security_audit.sh --json# Specific checks onlybash {baseDir}/scripts/security_audit.sh --check dockerbash {baseDir}/scripts/security_audit.sh --check sshbash {baseDir}/scripts/security_audit.sh --check configbash {baseDir}/scripts/security_audit.sh --check filesbash {baseDir}/scripts/security_audit.sh --check network```## What It Checks### OpenClaw Config (25 points)- `allowInsecureAuth` must be `false`- `dmPolicy` must not be open/allow-all- Port bindings must use `127.0.0.1`- API keys not hardcoded in config- Secure model permissions### Docker Security (25 points)- All port bindings use `127.0.0.1` (not `0.0.0.0`)- No privileged containers (except necessary)- Docker socket permissions- Container resource limits- No `--net=host` unless needed### SSH Configuration (20 points)- Root login disabled (`PermitRootLogin no`)- Password authentication disabled- Key-based auth only- Non-standard port (bonus)- Fail2ban or similar active### Network & Services (15 points)- No unnecessary exposed ports- Firewall active (ufw/iptables)- Only expected services listening- HTTPS/TLS termination configured### File Permissions (15 points)- openclaw.json not world-readable- SSH keys proper permissions (600)- .env files not world-readable- Docker socket permissions- No sensitive files in /tmp## Scoring| Score | Rating | Meaning ||-------|--------|---------|| 90-100 | 🟢 Excellent | Production-ready || 70-89 | 🟡 Good | Minor improvements needed || 50-69 | 🟠 Fair | Several issues to address || 0-49 | 🔴 Critical | Immediate action required |## Output Example```═══ Security Audit Report ═══Date: 2026-02-15 00:30:00[CONFIG] ✅ allowInsecureAuth: false[CONFIG] ✅ dmPolicy: allowlist[CONFIG] ✅ Ports bound to 127.0.0.1[DOCKER] ✅ All containers bind to 127.0.0.1[DOCKER] ⚠️ No resource limits on openclaw container[SSH] ✅ Root login disabled[SSH] ✅ Password auth disabled[NET] ✅ UFW active[FILES] ✅ Config file permissions OKScore: 92/100 — 🟢 ExcellentIssues: 1 warningRecommendations: 1. Add resource limits to Docker containers```## CreditsBuilt by [M. Abidi](https://www.linkedin.com/in/mohammad-ali-abidi) | [agxntsix.ai](https://www.agxntsix.ai)[YouTube](https://youtube.com/@aiwithabidi) | [GitHub](https://github.com/aiwithabidi)Part of the **AgxntSix Skill Suite** for OpenClaw agents.📅 **Need help setting up OpenClaw for your business?** [Book a free consultation](https://cal.com/agxntsix/abidi-openclaw)

Frequently asked questions