Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent OpenClaw security-hardening guide with expected firewall and configuration authority, but users should review commands before applying changes.
Install only if you want an agent to help audit and harden an OpenClaw Linux host. Review and explicitly approve any sudo, UFW, chmod, or /etc/ufw rollback action, especially on remote systems where a firewall mistake could interrupt access.
Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
Success means:
- no critical audit findings
- no warning audit findings when practical
- gateway reachable
- required ports reachable only from approved sources
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Recommended fix pattern:
chmod 700 <openclaw-credentials-dir>
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Use this on Ubuntu hosts that should accept only explicitly approved inbound traffic.
sudo ufw default deny incoming
sudo ufw default allow outgoing
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Use this on Ubuntu hosts that should accept only explicitly approved inbound traffic.
sudo ufw default deny incoming
sudo ufw default allow outgoing
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Use this on Ubuntu hosts that should accept only explicitly approved inbound traffic.
sudo ufw default deny incoming
sudo ufw default allow outgoing
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Use this on Ubuntu hosts that should accept only explicitly approved inbound traffic.
sudo ufw default deny incoming
sudo ufw default allow outgoing
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Use this on Ubuntu hosts that should accept only explicitly approved inbound traffic.
sudo ufw default deny incoming
sudo ufw default allow outgoing
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Use this on Ubuntu hosts that should accept only explicitly approved inbound traffic.
sudo ufw default deny incoming
sudo ufw default allow outgoing
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Use this on Ubuntu hosts that should accept only explicitly approved inbound traffic.
sudo ufw default deny incoming
sudo ufw default allow outgoing
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Use this on Ubuntu hosts that should accept only explicitly approved inbound traffic.
sudo ufw default deny incoming
sudo ufw default allow outgoing
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Use this on Ubuntu hosts that should accept only explicitly approved inbound traffic.
sudo ufw default deny incoming
sudo ufw default allow outgoing
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Use this on Ubuntu hosts that should accept only explicitly approved inbound traffic.
sudo ufw default deny incoming
sudo ufw default allow outgoing
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Use this on Ubuntu hosts that should accept only explicitly approved inbound traffic.
sudo ufw default deny incoming
sudo ufw default allow outgoing
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Use this on Ubuntu hosts that should accept only explicitly approved inbound traffic.
sudo ufw default deny incoming
sudo ufw default allow outgoing
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Use this on Ubuntu hosts that should accept only explicitly approved inbound traffic.
sudo ufw default deny incoming
sudo ufw default allow outgoing
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
STAMP="${1:-}"
if [[ -z "$STAMP" ]]; then
echo "Usage: sudo bash $0 <timestamp>"
echo "Example: sudo bash $0 20260316_164132"
exit 1
fi
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
STAMP="${1:-}"
if [[ -z "$STAMP" ]]; then
echo "Usage: sudo bash $0 <timestamp>"
echo "Example: sudo bash $0 20260316_164132"
exit 1
fi
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
STAMP="${1:-}"
if [[ -z "$STAMP" ]]; then
echo "Usage: sudo bash $0 <timestamp>"
echo "Example: sudo bash $0 20260316_164132"
exit 1
fi
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
STAMP="${1:-}"
if [[ -z "$STAMP" ]]; then
echo "Usage: sudo bash $0 <timestamp>"
echo "Example: sudo bash $0 20260316_164132"
exit 1
fi
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
fi
if [[ "${EUID}" -ne 0 ]]; then
echo "Please run as root: sudo bash $0 $STAMP"
exit 1
fi
This shell script performs safety-critical file writes into /etc/ufw and reloads the firewall as root, which can affect system connectivity. Although the usage lines describe how to run the script, they do not warn the user that it will overwrite active firewall configuration and immediately apply the restored rules.
No suspicious patterns detected.