Advanced OpenClaw System Health Check & Repair

Perform comprehensive security audits, system updates, network and service status checks, and configure scheduled health monitoring for OpenClaw deployments.

Security Scan

The skill is an instruction-only OpenClaw system healthcheck that is internally consistent: it uses local config and logs, requests no credentials or installs, and its instructions align with the stated purpose.

Purpose & Capability

Name and description claim a system/security healthcheck for OpenClaw and the skill only references OpenClaw-specific commands, local config (~/.openclaw/config/healthcheck.json) and logs. There are no unrelated environment variables, binaries, or config paths requested.

Instruction Scope

SKILL.md is high-level and tells the agent to run OpenClaw healthcheck subcommands and to configure cron scheduling. It references only OpenClaw state, system checks (SSH, firewall, updates), and local paths. The instructions do not include steps to read unrelated user files or transmit data externally, but they are vague about the exact commands used to set cron jobs or how elevated privileges are obtained — so the operator should verify the concrete commands the agent will run.

Install Mechanism

No install spec and no code files — instruction-only. That minimizes risk because nothing new will be written to disk by the skill package itself.

Credentials

The skill declares no required environment variables, no credentials, and no external endpoints. All required configuration is local (~/.openclaw/...). This is proportionate to a local healthcheck task.

Persistence & Privilege

The skill suggests configuring scheduled checks (cron) and writing config/log files under the user's home directory, which is reasonable for a monitoring tool. It does not request always:true and does not ask to modify other skills or global agent settings. Users should be aware that scheduling cron jobs and some security checks may require elevated privileges (root) to fully assess the system.

Assessment

This skill appears coherent and low-risk: it instructs the agent to run OpenClaw healthcheck commands and store config/logs under ~/.openclaw, and it does not request credentials or download code. Before installation, confirm you trust the OpenClaw CLI referenced by these commands (the skill assumes an existing 'openclaw' tool), and be prepared that some checks (firewall, SSH, package updates) may need sudo/root to be complete. Also review or backup your crontab before allowing automated cron setup and inspect any generated config (~/.openclaw/config/healthcheck.json) and logs (~/.openclaw/logs/healthcheck/) after first run. If you want stronger assurance, ask the publisher/source of this skill or provide the exact 'openclaw' command implementations for review.

healthcheck - OpenClaw 系统健康检查

Host security hardening and risk-tolerance configuration for OpenClaw deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, OpenClaw cron scheduling for periodic checks, or version status checks on a machine running OpenClaw (laptop, workstation, Pi, VPS).

Commands

openclaw healthcheck run - 运行完整健康检查

执行全面的系统健康检查，包括：

• 系统版本和更新状态
• 安全配置检查
• 网络连接状态
• 依赖项状态
• 存储空间
• 内存使用情况
• OpenClaw 服务状态

openclaw healthcheck audit - 安全审计

运行安全配置审计：

• SSH 配置检查
• 防火墙状态
• 系统更新状态
• 权限检查
• 风险评估

openclaw healthcheck cron - 设置定期检查

配置 cron 任务进行定期健康检查：

• 每日检查
• 每周检查
• 每月检查

openclaw healthcheck status - 查看健康状态

显示当前系统健康状态和最近检查结果。

openclaw healthcheck version - 版本检查

检查 OpenClaw 及其依赖项的版本。

示例

# 运行完整健康检查
openclaw healthcheck run

# 运行安全审计
openclaw healthcheck audit

# 查看健康状态
openclaw healthcheck status

输出

健康检查会生成报告，包括：

• 状态摘要（✅ 通过 / ⚠️ 警告 / ❌ 失败）
• 详细的问题列表
• 修复建议
• 风险评分

配置

健康检查配置存储在 ~/.openclaw/config/healthcheck.json。

自定义检查可以在这里添加。

日志

检查日志存储在 ~/.openclaw/logs/healthcheck/ 目录。

---

Created: 2026-03-23 Version: 1.0.0