Security Scanner

Run a local security assessment on any OpenClaw installation.

Usage

The skill provides a bash script that scans your OpenClaw setup and reports findings with severity levels.

Quick scan (read-only)

bash "$(dirname "$0")/oc-security-scan.sh"

Auto-fix issues

bash "$(dirname "$0")/oc-security-scan.sh" --fix

Save a report

bash "$(dirname "$0")/oc-security-scan.sh" --report

JSON output

bash "$(dirname "$0")/oc-security-scan.sh" --json

What It Checks

• OpenClaw Configuration — bind address, token strength, config permissions, exec security mode
• Network Exposure — listening ports, firewall status, public interface exposure
• Credential Hygiene — plaintext secrets, file permissions, .gitignore patterns
• OS Hardening — disk encryption, auto-updates, OS version, root usage

  小蔥技能站7w4.net每天更新，海量AI技能等你發現。

• Agent Guardrails — RULES.md, memory file permissions, safety constraints

Output

Color-coded terminal output with severity levels:

• 🔴 CRITICAL — immediate action required
• 🟡 WARNING — should be addressed
• 🟢 PASS — looks good
• ⚪ INFO — informational

Ends with a security score out of 100 (A-F grade).

Security Philosophy

• Local only — zero external network calls, nothing phones home
• Read-only by default — only modifies files when --fix is explicitly passed
• Owner-operated — designed to be run by the OpenClaw owner on their own machine
• No dependencies — standard unix tools + openclaw CLI only

這個工具質量很好，能全面檢查 OpenClaw 的安全配置。它操作簡單、提示清晰，掃描結果用顏色區分嚴重程度，還能自動修復一些問題並給出評分。設計注重隱私，不會往外發送資料。指令碼邏輯完善，對普通使用者比較友好，但文件稍顯簡單，首次使用可能需要一點時間來理解輸出結果。