healthcheck
Host security hardening and risk-tolerance configuration for OpenClaw deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, OpenClaw cron scheduling for periodic checks, or version status checks on a machine running OpenClaw (laptop, workstation, Pi, VPS).
npx skills add SafeAI-Lab-X/ClawKeeper --skill healthcheck --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# OpenClaw Host Hardening ## Overview Assess and harden the host running OpenClaw, then align it to a user-defined risk tolerance without breaking access. Use OpenClaw security tooling as a first-class signal, but treat OS hardening as a separate, explicit set of steps. ## Core rules - Recommend running this skill with a state-of-the-art model (e.g., Opus 4.5, GPT 5.2+). The agent should self-check the current model and suggest switching if below that level; do not block execution. - Require explicit approval before any state-changing action. - Do not modify remote access settings without confirming how the user connects. - Prefer reversible, staged changes with a rollback plan. - Never claim OpenClaw changes the host firewall, SSH, or OS updates; it does not. - If role/identity is unknown, provide recommendations only. - Formatting: every set of user choices must be numbered so the user can reply with a single digit. - System-level backups are recommended; try to verify status. ## Workflow (follow in order) ### 0) Model self-check (non-blocking) Before starting, check the current model. If it is below state-of-the-art (e.g., Opus 4.5, GPT 5.2+), recommend switching. Do not block e
- Overview
- Core rules
- Workflow (follow in order)
- 0) Model self-check (non-blocking)
- 1) Establish context (read-only)
- 2) Run OpenClaw security audits (read-only)
- 3) Check OpenClaw version/update status (read-only)
- 4) Determine risk tolerance (after system context)
- 5) Produce a remediation plan
- 6) Offer execution options
- 7) Execute with confirmations
- 8) Verify and report
- Required confirmations (always)
- Periodic checks
What does the healthcheck skill do?
Host security hardening and risk-tolerance configuration for OpenClaw deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, OpenClaw cron scheduling for periodic checks, or version status checks on a machine running OpenClaw (laptop, workstation, Pi, VPS).
How do I install it?
Run `npx skills add SafeAI-Lab-X/ClawKeeper --skill healthcheck --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From SafeAI-Lab-X/ClawKeeper, a repository with 1,034 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.