OpenClaw Setup Wizard

• Risk level: Low
• Analyzed: Feb 25, 2026, 3:01 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's files, instructions, and scripts are coherent with a local OpenClaw setup/hardening utility: they inspect and modify OpenClaw config, workspace, logs, and permissions but do not show signs of network exfiltration or unrelated credential requests.

This skill appears to be a straightforward local setup and hardening helper for OpenClaw. Before running it: (1) review the two scripts (scripts/diagnose.sh and scripts/harden.sh) yourself to confirm you understand the exact filesystem paths they inspect/change; (2) back up your ~/.openclaw and any important configs; (3) run the diagnostic script first (it only reads and reports) and inspect its output before running harden.sh (which will chmod files and create ~/backups/openclaw); (4) run scripts as your regular user (not root) unless you explicitly need elevated privileges; (5) if you obtained this skill from an untrusted or unknown source, consider running the scripts in a sandbox or VM. Key points to note: the scripts will read potentially sensitive config and log files (models.json, auth-profiles.json, session logs) but do not contain any obvious network exfiltration or external download behavior.