openclaw-security-handbook-cn基于 ZAST.AI 安全手册的 OpenClaw 安全审计与加固技能。运行全面安全诊断（内置 audit + 手册补充项），生成结构化报告，提供交互式修复引导，支持定时审计调度。触发场景：安全审计、安全加固、漏洞检查、security audit、hardening、暴露检查。
Install via ClawdBot CLI:
clawdbot install ruijh/openclaw-security-handbook-cnGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
rm -rf ~Calls external URL not in known-safe list
https://github.com/zast-ai/openclaw-securityAI Analysis
This skill performs legitimate security auditing functions for OpenClaw installations and follows security-conscious design principles (user confirmation for destructive actions, no automatic credential operations). The external GitHub reference is to a known security handbook repository consistent with the skill's stated purpose. However, the skill does execute shell commands that could be destructive if misused (rm -rf, file permission changes), requiring careful user oversight.
Audited Apr 17, 2026 · audit v1.0
Generated May 6, 2026
企业每季度或年度需进行安全合规检查，确保系统符合行业标准。该技能通过自动化诊断和手动补充检查，快速识别配置错误、密钥泄露等风险，生成结构化报告供合规部门存档。
开发运维团队在部署新服务或更新后，可用此技能对服务器进行安全扫描，检查文件权限、开放端口和敏感信息泄露，并引导修复加固，降低被攻击风险。
个人用户可定期运行审计，检查本地会话文件、日志和记忆文件中是否包含密码、令牌等敏感信息，防止被恶意软件窃取，提升个人设备安全性。
在容器化或微服务架构中，该技能可检查Docker沙箱网络模式、技能文件权限等，确保云原生环境的安全基线配置正确，减少攻击面。
安全运维团队可配置定时审计，每日自动扫描并记录安全状态变化，及时告警异常，实现持续安全监控和快速响应。
提供基于该技能的安全报告生成和定期审计服务，按每月/年订阅收费，客户无需自行部署即可获取专业安全评估。
向企业客户提供一次性的安全审计咨询，同时授权该技能工具用于内部持续审计，按项目收费加年度授权许可费。
基础安全审计技能开源，通过社区推广；企业版提供更深入的检查项、优先支持和高级报告模板，按企业规模收费。
💬 Integration Tip
可集成到CI/CD流水线中，在代码部署后自动触发安全审计，并将结果输出到监控系统如Prometheus。
Scored Jun 20, 2026
Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with the npm-installed clawdhub CLI.
Mission control dashboard for OpenClaw - real-time session monitoring, LLM usage tracking, cost intelligence, and system vitals. View all your AI agents in o...
Transcribe YouTube videos to text by extracting captions and subtitles directly from the video URL using yt-dlp without audio processing.
Manage a self-hosted Trello-like board via `wekancli`. Create, move and archive cards, lists and boards on a WeKan server. Use when user asks about task boar...
Proactive security monitoring, threat scanning, and auto-remediation for OpenClaw deployments
Create or improve SOUL.md files for OpenClaw agents through guided conversation. Use when designing agent personality, crafting a soul, or saying "help me create a soul". Supports self-improvement.