healthcheck

What This Skill Does

The healthcheck skill is the primary security and hardening interface for OpenClaw deployments. It is designed to act as an automated security auditor and configuration advisor for the machine running the OpenClaw agent. Rather than performing intrusive, automated changes, the skill follows a consultative, 'human-in-the-loop' methodology to assess the host environment, identify potential security risks, and provide remediation steps tailored to the user's specific risk tolerance. It covers critical areas including OS-level patching, SSH configuration, firewall status, disk encryption, and backup verification. By analyzing the host's unique environment—be it a standalone laptop, a headless Raspberry Pi, or a remote VPS—the skill ensures that the agent's operations remain secure without jeopardizing remote access or breaking existing workflows.

Installation

To add this capability to your agent, execute the following command in your terminal:

clawhub install openclaw/openclaw/skills/healthcheck

Once installed, ensure your agent has the necessary environment permissions to run local diagnostic commands, as the skill relies on reading system-level metadata to provide accurate advice.

Use Cases

This skill is ideal for users who need to:

• Audit the security posture of a new OpenClaw deployment.
• Determine if the current host environment meets security best practices for handling sensitive data.
• Configure automated, periodic security reviews through OpenClaw's internal scheduling.
• Perform a 'readiness check' before opening external access to an OpenClaw-controlled environment.
• Verify the status of local security features like file-system encryption or automatic patch management.

Example Prompts

1. 'Run a healthcheck on this machine and tell me if my SSH settings are safe for remote access.'
2. 'I want to harden my Raspberry Pi running OpenClaw. What are the recommended next steps based on my current setup?'
3. 'Check my current security risk posture and tell me if I am missing any critical system updates.'

Tips & Limitations

Always prefer running this skill with the most advanced model available (e.g., Opus 4.5 or GPT 5.2+) to ensure the agent can accurately interpret complex system audit logs. Note that this skill does not perform active changes to your firewall or SSH daemon. Instead, it provides actionable, step-by-step instructions. Always verify system backups before attempting any hardening procedures recommended by the agent to prevent accidental lockout.