What It Does
OpenClaw First-Run Security Hardening checks whether a self-hosted OpenClaw setup has documented bind-address, TLS, authentication, gateway exposure, token ownership, secrets storage, log redaction, backup access, update, rollback, rate-limit, and incident-response controls before broader exposure. The skill runs offline against redacted security notes and returns JSON with a pass, review, or blocked decision, missing controls, risk markers, and `mutated_files`.
Use Cases
- Teams preparing review-ready evidence before operational handoff.
- Maintainers who need deterministic local checks without contacting live systems.
- Operators documenting risks, gaps, owners, and next actions for release governance.
Requirements
- Python 3 standard library only.
- No API keys required.
- OpenClaw-compatible local skill workspace with redacted evidence notes.
Price
$4.99 one-time purchase.