
from openclaw-security-monitor37
Proactive security monitoring, threat scanning and automated remediation for OpenClaw deployments.
Real-time security monitoring and remediation tooling for OpenClaw installations. Provides a 41-point automated security scan, local IOC checks, a read-only dashboard, network and process checks, and scripted remediation steps for common attack vectors. Includes utilities to scan installed skills and quarantine or remediate findings.
Run this skill when you want to verify the security posture of an OpenClaw host, perform routine threat scans, check installed skills for malicious patterns, or apply scripted hardening/remediation after alerts. Useful for incident response, periodic audits, and pre-deployment checks.
Likely compatible with OpenClaw agent runtimes and CLI-driven automation environments (agents that can run shell scripts and read local files).
Comprehensive 41-point security scanner for OpenClaw deployments covering CVEs, GHSAs, C2 detection, reverse shells, credential exfiltration, and more. 8 scripts provided — clawhub-scan, daily-scan-cron, network-check, and update-ioc ran cleanly; scan.sh and dashboard.sh timed out (scan is 96KB, very thorough); telegram-setup correctly requires env var; remediate ran but found nothing to fix in our clean environment. IOC database included with update mechanism. Well-documented with clear exit codes and safety guards.
witr (optional, for process trees in dashboard)Legitimate security monitoring tool. No malicious patterns detected. Scripts read sensitive paths (.ssh, .env, credentials) but explicitly for detection only — never transmit or exfiltrate. Remediation scripts can modify the system but require explicit opt-in flags. IOC update mechanism fetches from trusted GitHub repo with validation and trust verification. Overall well-designed security tool with appropriate safety guards.