Monitor NVD CVEs, community advisories, and pre-CVE GitHub advisories in one agent security feed.
by davida-ps103 installs1 stars
Security
Setup
Configure OpenClaw installations with optimized settings, channel setup, security hardening, and production recommendations.
What it does
| Task | Load | |------|------| | Messaging channels (Telegram, WhatsApp, Discord, etc.) | | | Agent settings, models, workspaces | | | Security, auth, DM policies, allowlists | | | Tools: exec, browser, web, media | | | Cron, hooks, heartbeats, automation | | | Recommendations by use case |…
The skill document
Quick Reference
| Task | Load |
|---|---|
| Messaging channels (Telegram, WhatsApp, Discord, etc.) | channels.md |
| Agent settings, models, workspaces | agents.md |
| Security, auth, DM policies, allowlists | security.md |
| Tools: exec, browser, web, media | tools.md |
| Cron, hooks, heartbeats, automation | automation.md |
| Recommendations by use case | recommendations.md |
| Memory search, embeddings, QMD | memory.md |
| Gateway: port, TLS, Tailscale, remote | gateway.md |
First Setup Checklist
Before any config, run:
openclaw onboard --install-daemon # Full wizard
openclaw doctor # Check issues
Minimum viable config:
- At least one channel connected (Telegram recommended for testing)
- Model configured (Anthropic Claude or OpenAI)
- Workspace path set (
agents.defaults.workspace) - Owner allowlist configured (your user ID in
channels.*.allowFrom)
Config Locations
| File | Purpose |
|---|---|
~/.openclaw/openclaw.json | Main config |
~/.openclaw/.env | Environment variables |
~/.openclaw/workspace/ | Default workspace |
~/.openclaw/sessions/ | Session storage |
Hot reload: Most settings apply instantly. Gateway settings (port, TLS) require restart.
Common Mistakes to Avoid
- Open DM policy without allowlist → Anyone can message your bot
- No auth token on remote gateway → Exposed to internet
- Model without fallbacks → Single point of failure
- Heartbeat without delivery target → Lost proactive messages
- exec.security: "full" in groups → Dangerous command access
When You're Done
openclaw doctor # Verify config
openclaw status # Check runtime
openclaw health # Gateway health
Related skills
Enforce least privilege and report host, network, and compliance violations with evidence and mitigations.
60 installs
Guide safe installation, operation, auditing, and extension of the read-only OpenClaw operations dashboard.
174 installs9 stars
Browse and install a weekly updated collection of 11,211+ OpenClaw agent skills.
170 installs3 stars
Manage Nextcloud notes, tasks, calendars, files, contacts, shares, and Deck boards from one JSON CLI.
187 installs9 stars
Monitor signed advisories, match affected installed skills, and gate risky installs or removals on approval.
357 installs8 stars
More from Iván
Browse all skillsWrite, debug, and tune Java and JVM systems with JDK-aware code and diagnostic steps.
by Iván130 installs9 stars
Design and critique visual artifacts using measurable rules for hierarchy, spacing, type, color, and layout.
by Iván137 installs5 stars
Diagnose CSS mechanics and produce targeted fixes or complete stylesheets for the chosen stack.
by Iván97 installs5 stars
Architect, troubleshoot, secure, and cost-control AWS infrastructure with explicit cost and blast-radius guidance.
by Iván138 installs2 stars
Diagnose, validate, transform, and evolve JSON payloads across parsers, schemas, storage, and large files.
by Iván112 installs3 stars
Build and operate a testable learning plan with practice, spaced review, transfer checks, and durable local records.
by Iván93 installs3 stars