Openclaw Security Audit

Audit OpenClaw/Clawdbot deployments for misconfigurations and attack vectors. Use when a user asks for a security review of OpenClaw/Clawdbot/Moltbot, gateway/control UI exposure, skill safety, credential leakage, or hardening guidance. Produces a terminal report with OK/VULNERABLE findings and fixes.

“This security audit skill appears well-intentioned with appropriate security-focused design, but lacks critical trust signals including license information and author verification. The skill's purpose aligns with security hardening, but the missing license and unknown authorship warrant caution despite its seemingly safe functionality.”

Last scanned: 3/29/2026

Community Mentions

From Reddit & GitHub discussions

Changelog v1.0.0

openclaw-security-audit 1.0.0 – Initial release - New skill to audit OpenClaw/Clawdbot/Moltbot environments for misconfigurations and security risks. - Provides detailed step-by-step read-only security checks, covering network exposure, authentication, secrets, permissions, installed skills, and process persistence. - Generates a terminal-style report with OK/VULNERABLE/UNKNOWN findings, actionable impact explanation, and remediation steps. - Redacts secrets, avoids risky commands by default, a...

Related Skills