Tencent SkillHub · Security & Compliance

Security Monitor Deploy

Comprehensive security audit for OpenClaw deployments. Checks Docker port bindings, SSH config, openclaw.json settings, file permissions, exposed services, a...

skill openclawclawhub Free

0 Downloads

0 Stars

0 Installs

0 Score

High Signal

Comprehensive security audit for OpenClaw deployments. Checks Docker port bindings, SSH config, openclaw.json settings, file permissions, exposed services, a...

⬇ 0 downloads ★ 0 stars Unverified but indexed

Install for OpenClaw

Known item issue.

This item's current download entry is known to bounce back to a listing or homepage instead of returning a package file.

Quick setup

Open the source page and confirm the package flow manually.
Review SKILL.md if you can obtain the files.
Treat this source as manual setup until the download is verified.

Requirements

Target platform: OpenClaw
Install method: Manual import
Extraction: Extract archive
Prerequisites: OpenClaw
Primary doc: SKILL.md

Package facts

Download mode: Manual review
Package format: ZIP package
Source platform: Tencent SkillHub
What's included: SKILL.md, scripts/security_audit.sh

Validation

Open the source listing and confirm there is a real package or setup artifact available.
Review SKILL.md before asking your agent to continue.
Treat this source as manual setup until the upstream download flow is fixed.

Install with your agent

Agent handoff

Use the source page and any available docs to guide the install because the item currently does not return a direct package file.

Open the source page via Open source listing.
If you can obtain the package, extract it into a folder your agent can access.
Paste one of the prompts below and point your agent at the source page and extracted files.

New install

I tried to install a skill package from Yavira, but the item currently does not return a direct package file. Inspect the source page and any extracted docs, then tell me what you can confirm and any manual steps still required.

Upgrade existing

I tried to upgrade a skill package from Yavira, but the item currently does not return a direct package file. Compare the source page and any extracted docs with my current installation, then summarize what changed and what manual follow-up I still need.

Open Send to Agent page Open JSON manifest Open Markdown brief

Trust & source

Release facts

Source: Tencent SkillHub
Verification: Indexed source record
Version: 1.0.0

Provenance

Publisher: aiwithabidi
Source page: View original listing
Canonical URL: Open canonical page

Documentation

ClawHub primary doc Primary doc: SKILL.md 10 sections Open source page

Security Monitor 🛡️

Comprehensive security audit for OpenClaw deployments. Scans your Docker configuration, SSH settings, firewall rules, OpenClaw config, and file permissions. Produces a security score (0-100) with actionable recommendations.

Quick Start

# Run full audit bash {baseDir}/scripts/security_audit.sh # JSON output bash {baseDir}/scripts/security_audit.sh --json # Specific checks only bash {baseDir}/scripts/security_audit.sh --check docker bash {baseDir}/scripts/security_audit.sh --check ssh bash {baseDir}/scripts/security_audit.sh --check config bash {baseDir}/scripts/security_audit.sh --check files bash {baseDir}/scripts/security_audit.sh --check network

OpenClaw Config (25 points)

allowInsecureAuth must be false dmPolicy must not be open/allow-all Port bindings must use 127.0.0.1 API keys not hardcoded in config Secure model permissions

Docker Security (25 points)

All port bindings use 127.0.0.1 (not 0.0.0.0) No privileged containers (except necessary) Docker socket permissions Container resource limits No --net=host unless needed

SSH Configuration (20 points)

Root login disabled (PermitRootLogin no) Password authentication disabled Key-based auth only Non-standard port (bonus) Fail2ban or similar active

Network & Services (15 points)

No unnecessary exposed ports Firewall active (ufw/iptables) Only expected services listening HTTPS/TLS termination configured

File Permissions (15 points)

openclaw.json not world-readable SSH keys proper permissions (600) .env files not world-readable Docker socket permissions No sensitive files in /tmp

Scoring

ScoreRatingMeaning90-100🟢 ExcellentProduction-ready70-89🟡 GoodMinor improvements needed50-69🟠 FairSeveral issues to address0-49🔴 CriticalImmediate action required

Output Example

═══ Security Audit Report ═══ Date: 2026-02-15 00:30:00 [CONFIG] ✅ allowInsecureAuth: false [CONFIG] ✅ dmPolicy: allowlist [CONFIG] ✅ Ports bound to 127.0.0.1 [DOCKER] ✅ All containers bind to 127.0.0.1 [DOCKER] ⚠️ No resource limits on openclaw container [SSH] ✅ Root login disabled [SSH] ✅ Password auth disabled [NET] ✅ UFW active [FILES] ✅ Config file permissions OK Score: 92/100 — 🟢 Excellent Issues: 1 warning Recommendations: 1. Add resource limits to Docker containers

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents. 📅 Need help setting up OpenClaw for your business? Book a free consultation

Category context

Identity, auth, scanning, governance, audit, and operational guardrails.

Source: Tencent SkillHub

Largest current source with strong distribution and engagement signals.

Package contents

Included in package

1 Docs1 Scripts

SKILL.md Primary doc
scripts/security_audit.sh Scripts