Healthcheck
If you're running OpenClaw on a server or workstation, this walks you through hardening the host OS without locking yourself out. It checks SSH config, firewall rules, listening ports, updates, and backup status, then helps you pick a risk profile (VPS hardened, home balanced, dev convenience) and generates a remediation plan with rollback steps. The workflow is careful about preserving remote access and requires confirmation before touching anything. It also runs OpenClaw's own security audit tooling and can schedule periodic checks via cron. Honestly most useful if you've spun up a gateway host and want to tighten it methodically instead of guessing at iptables rules at midnight.
- skills.sh installs
- 2.9K
- GitHub stars
- 382.8K
- last updated
- Jul 14, 2026
Install
$ npx -y skills add steipete/clawdis --skill healthcheck --agent claude-codeInstalls into .claude/skills of the current project.
Files
OpenClaw host healthcheck
Goal: assess host risk, run read-only checks, then propose staged hardening without breaking access.
Rules
- Ask before state-changing actions.
- Do not change SSH/firewall/remote access until access path is confirmed.
- Prefer reversible steps and rollback notes.
- Never claim OpenClaw manages OS firewall, SSH, or updates.
- If identity/role unknown, recommend only.
- User choices: numbered list.
- Never print secrets.
Context to infer first
- OS/version, container vs host.
- Privilege level.
- Access path: local, SSH, RDP, tailnet.
- Network exposure: public IP, reverse proxy, tunnel, LAN only.
- OpenClaw gateway status, bind, auth.
- Backup status.
- Disk encryption.
- Automatic security updates.
- Usage mode: personal workstation, local assistant box, remote server, other.
Ask only for missing facts. Simple phrasing preferred.
Read-only checks
Ask once for permission to run read-only checks. Then run relevant commands.
Common:
openclaw security audit --deep
openclaw gateway status --deep
openclaw doctor --lint
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/steipete/clawdis
- First seen
- Apr 16, 2026
More from steipete/clawdis
All 61- Session Logs2.9K
- Trello2.9K
- Blogwatcher2.8K
- Github2.8K
- Model Usage2.8K
- Sonoscli2.8K
- Notion2.7K
- Openai Whisper Api2.7K
- Openhue2.7K
- Sherpa Onnx Tts2.7K
- Spotify Player2.7K
- Things Mac2.7K
- Bear Notes2.6K
- Blucli2.6K
- Camsnap2.6K
- Eightctl2.6K
- Gemini2.6K
- Gh Issues2.6K
- Gifgrep2.6K
- Goplaces2.6K
- Oracle2.6K
- Sag2.6K
- Skill Creator2.6K
- Songsee2.6K
Recommended
cavemanjuliusbrussee/cavemanUltra-compressed communication mode. Cuts output tokens 65% (measured) by speaking like caveman while keeping full technical accuracy. Supports intensity levels618.3Kskills.sh installs
improveshadcn/improveSurvey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute. Strictly read-only on s40Kskills.sh installs
systematic-debuggingobra/superpowersUse when encountering any bug, test failure, or unexpected behavior, before proposing fixes326.7Kskills.sh installs
karpathy-guidelinesforrestchang/andrej-karpathy-skillsBehavioral guidelines to reduce common LLM coding mistakes through explicit assumptions, simplicity, and verifiable success criteria.17.9Kskills.sh installs
find-skillsvercel-labs/skillsHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express int4.3Mskills.sh installs