[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M698X7NQXB8H1CWW6MZ1K3ER":3,"skill-same:01M698X7NQXB8H1CWW6MZ1K3ER":56},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":9,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":28,"linkOnly":29,"markdownContent":30,"markdownBody":31,"frontMatter":32,"refName":33,"commitSha":34,"skillDirectory":35,"forksCount":36,"repositoryHtmlUrl":37,"repositoryHomepageUrl":38,"ownerHtmlUrl":39,"ownerBlogUrl":38,"ownerDescription":40,"updatedAt":41,"install":42,"resources":55},"01M698X7NQXB8H1CWW6MZ1K3ER","healthcheck",null,"Audit\u002Fharden OpenClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security.","openclaw\u002Fopenclaw","openclaw","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252820863?v=4","01M698P3FSAZ6B4R928ZF19KPT","01M698PDMDRVH56MV30D253NFP",394406,"MIT","https:\u002F\u002Fgithub.com\u002Fopenclaw\u002Fopenclaw\u002Fblob\u002Fmain\u002Fskills\u002Fhealthcheck\u002FSKILL.md",[],[5,9,18,19,20,21,22,23,24,25,26,27],"security","gateway","audit","encryption","firewall","ssh","disk","harden","updates","hosts","2026-11-10 10:12:30",false,"---\nname: healthcheck\ndescription: \"Audit\u002Fharden OpenClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security.\"\n---\n\n# OpenClaw host healthcheck\n\nGoal: assess host risk, run read-only checks, then propose staged hardening without breaking access.\n\n## Rules\n\n- Ask before state-changing actions.\n- Do not change SSH\u002Ffirewall\u002Fremote access until access path is confirmed.\n- Prefer reversible steps and rollback notes.\n- Never claim OpenClaw manages OS firewall, SSH, or updates.\n- If identity\u002Frole unknown, recommend only.\n- User choices: numbered list.\n- Never print secrets.\n\n## Context to infer first\n\n- OS\u002Fversion, container vs host.\n- Privilege level.\n- Access path: local, SSH, RDP, tailnet.\n- Network exposure: public IP, reverse proxy, tunnel, LAN only.\n- OpenClaw gateway status, bind, auth.\n- Backup status.\n- Disk encryption.\n- Automatic security updates.\n- Usage mode: personal workstation, local assistant box, remote server, other.\n\nAsk only for missing facts. Simple phrasing preferred.\n\n## Read-only checks\n\nAsk once for permission to run read-only checks. Then run relevant commands.\n\nCommon:\n\n```bash\nopenclaw security audit --deep\nopenclaw gateway status --deep\nopenclaw doctor --lint\n```\n\n`doctor --lint` can exit `1` for findings: read the report and continue the remaining checks. Ordinary `doctor` and `doctor --non-interactive` can copy legacy config and migrate state without `--fix`; reserve repairs for explicit approval. Read-only checks exclude config\u002Fservice repairs and state migrations, but may produce incidental logs or cache bookkeeping.\n\nmacOS:\n\n```bash\nsw_vers\nlsof -nP -iTCP -sTCP:LISTEN\n\u002Fusr\u002Flibexec\u002FApplicationFirewall\u002Fsocketfilterfw --getglobalstate\npfctl -s info\ntmutil status\nfdesetup status\nsoftwareupdate --schedule\n```\n\nLinux:\n\n```bash\ncat \u002Fetc\u002Fos-release\nss -ltnup || ss -ltnp\nufw status || firewall-cmd --state || nft list ruleset\nsystemctl status ssh sshd\nlsblk -f\n```\n\nWindows:\n\n```powershell\nsysteminfo\nGet-NetFirewallProfile\nGet-BitLockerVolume\n```\n\n## Risk profile\n\nAfter context is known, ask desired posture:\n\n1. Convenience: local\u002Fprivate, minimal prompts.\n2. Balanced: secure defaults, low friction.\n3. Strict: remote\u002Fpublic\u002Fsensitive data, more lock-down.\n\n## Report shape\n\n- Current posture: one paragraph.\n- Findings: severity + evidence + why it matters.\n- Recommended plan: staged, reversible.\n- Commands: read-only first; write actions only after approval.\n- Gaps: what could not be checked.\n\n## Hardening menu\n\nOffer only relevant items:\n\n- Bind gateway to loopback\u002FLAN\u002Ftailnet intentionally.\n- Require auth for remote access.\n- Close public ports or restrict by firewall.\n- Enable OS security updates.\n- Enable disk encryption.\n- Verify backups and restore path.\n- Disable password SSH or require keys\u002FMFA where appropriate.\n- Add scheduled `openclaw security audit --deep`.\n\nConfirm exact action before applying.\n","# OpenClaw host healthcheck\n\nGoal: assess host risk, run read-only checks, then propose staged hardening without breaking access.\n\n## Rules\n\n- Ask before state-changing actions.\n- Do not change SSH\u002Ffirewall\u002Fremote access until access path is confirmed.\n- Prefer reversible steps and rollback notes.\n- Never claim OpenClaw manages OS firewall, SSH, or updates.\n- If identity\u002Frole unknown, recommend only.\n- User choices: numbered list.\n- Never print secrets.\n\n## Context to infer first\n\n- OS\u002Fversion, container vs host.\n- Privilege level.\n- Access path: local, SSH, RDP, tailnet.\n- Network exposure: public IP, reverse proxy, tunnel, LAN only.\n- OpenClaw gateway status, bind, auth.\n- Backup status.\n- Disk encryption.\n- Automatic security updates.\n- Usage mode: personal workstation, local assistant box, remote server, other.\n\nAsk only for missing facts. Simple phrasing preferred.\n\n## Read-only checks\n\nAsk once for permission to run read-only checks. Then run relevant commands.\n\nCommon:\n\n```bash\nopenclaw security audit --deep\nopenclaw gateway status --deep\nopenclaw doctor --lint\n```\n\n`doctor --lint` can exit `1` for findings: read the report and continue the remaining checks. Ordinary `doctor` and `doctor --non-interactive` can copy legacy config and migrate state without `--fix`; reserve repairs for explicit approval. Read-only checks exclude config\u002Fservice repairs and state migrations, but may produce incidental logs or cache bookkeeping.\n\nmacOS:\n\n```bash\nsw_vers\nlsof -nP -iTCP -sTCP:LISTEN\n\u002Fusr\u002Flibexec\u002FApplicationFirewall\u002Fsocketfilterfw --getglobalstate\npfctl -s info\ntmutil status\nfdesetup status\nsoftwareupdate --schedule\n```\n\nLinux:\n\n```bash\ncat \u002Fetc\u002Fos-release\nss -ltnup || ss -ltnp\nufw status || firewall-cmd --state || nft list ruleset\nsystemctl status ssh sshd\nlsblk -f\n```\n\nWindows:\n\n```powershell\nsysteminfo\nGet-NetFirewallProfile\nGet-BitLockerVolume\n```\n\n## Risk profile\n\nAfter context is known, ask desired posture:\n\n1. Convenience: local\u002Fprivate, minimal prompts.\n2. Balanced: secure defaults, low friction.\n3. Strict: remote\u002Fpublic\u002Fsensitive data, more lock-down.\n\n## Report shape\n\n- Current posture: one paragraph.\n- Findings: severity + evidence + why it matters.\n- Recommended plan: staged, reversible.\n- Commands: read-only first; write actions only after approval.\n- Gaps: what could not be checked.\n\n## Hardening menu\n\nOffer only relevant items:\n\n- Bind gateway to loopback\u002FLAN\u002Ftailnet intentionally.\n- Require auth for remote access.\n- Close public ports or restrict by firewall.\n- Enable OS security updates.\n- Enable disk encryption.\n- Verify backups and restore path.\n- Disable password SSH or require keys\u002FMFA where appropriate.\n- Add scheduled `openclaw security audit --deep`.\n\nConfirm exact action before applying.\n",{"name":5,"description":7},"main","f1c93577085244aa96aa87b53a2df9b59d293bd7","skills\u002Fhealthcheck",82884,"https:\u002F\u002Fgithub.com\u002Fopenclaw\u002Fopenclaw","https:\u002F\u002Fopenclaw.ai","https:\u002F\u002Fgithub.com\u002Fopenclaw","Your personal, open source AI assistant.","2026-11-13 03:01:37",{"source":8,"skillName":5,"commands":43,"prompt":53,"zipAvailable":54},[44,47,50],{"tool":45,"command":46},"npx","npx skills add openclaw\u002Fopenclaw --skill healthcheck",{"tool":48,"command":49},"bunx","bunx skills add openclaw\u002Fopenclaw --skill healthcheck",{"tool":51,"command":52},"pnpm","pnpm dlx skills add openclaw\u002Fopenclaw --skill healthcheck","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fopenclaw\u002Fopenclaw\u002Fblob\u002Fmain\u002Fskills\u002Fhealthcheck\u002FSKILL.md",true,[],[57,63,86,104,126,150],{"skillNo":58,"name":59,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":9,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":60,"categories":61,"keywords":62,"publishedAt":28},"01M698VP84FNM6G9MR1HPX7MF7","lobster","https:\u002F\u002Fgithub.com\u002Fopenclaw\u002Fopenclaw\u002Fblob\u002Fmain\u002Fextensions\u002Flobster\u002FSKILL.md",[],[59],{"skillNo":64,"name":65,"nameZh":6,"description":66,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":9,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":67,"categories":68,"keywords":69,"publishedAt":28},"01M698YY8QGQ7S8TJNKJG6VTPH","xurl","xurl CLI for authenticated X posts, replies, reads\u002Fsearch, DMs, media upload, followers, auth status, or raw v2 API calls.","https:\u002F\u002Fgithub.com\u002Fopenclaw\u002Fopenclaw\u002Fblob\u002Fmain\u002Fskills\u002Fxurl\u002FSKILL.md",[],[65,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85],"for","api","calls","replies","posts","upload","tap","install","brew","node","Media","search","npm","status","auth","cli",{"skillNo":87,"name":88,"nameZh":6,"description":89,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":9,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":90,"categories":91,"keywords":92,"publishedAt":28},"01M698YWT1CJ0WK88WB909R9RT","weather","Current weather and forecasts with web_fetch, falling back to wttr.in curl for locations, rain, temperature, travel planning.","https:\u002F\u002Fgithub.com\u002Fopenclaw\u002Fopenclaw\u002Fblob\u002Fmain\u002Fskills\u002Fweather\u002FSKILL.md",[],[88,93,94,77,95,78,96,97,98,99,100,101,70,102,103],"travel planning","travel","fetch","curl","https","help","planning","web","back","temperature","with",{"skillNo":105,"name":106,"nameZh":6,"description":107,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":9,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":108,"categories":109,"keywords":115,"publishedAt":28},"01M698YV2Q0R0JJKAWGFS21K0N","visualize","Create inline visuals for code and explanations, or author persistent OpenClaw dashboard widgets with show_widget.","https:\u002F\u002Fgithub.com\u002Fopenclaw\u002Fopenclaw\u002Fblob\u002Fmain\u002Fskills\u002Fvisualize\u002FSKILL.md",[110],{"categoryNo":111,"categoryName":112,"taxonomyType":113,"taxonomyTypeDesc":114},"01JBSEEDCAT000000000000033","数据分析师","PROFESSION","适用职业",[106,116,117,118,119,70,103,120,121,122,123,124,9,125],"widgets","openclaw dashboard","author","inline","show","code","create","visuals","dashboard","widget",{"skillNo":127,"name":128,"nameZh":6,"description":129,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":9,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":130,"categories":131,"keywords":140,"publishedAt":28},"01M698YS2TRJH9ENG28HD9CD87","trello","Manage Trello boards, lists, and cards via the Trello REST API.","https:\u002F\u002Fgithub.com\u002Fopenclaw\u002Fopenclaw\u002Fblob\u002Fmain\u002Fskills\u002Ftrello\u002FSKILL.md",[132,137],{"categoryNo":133,"categoryName":134,"taxonomyType":135,"taxonomyTypeDesc":136},"01JBSEEDCAT000000000000010","后端与接口","SCENARIO","使用场景",{"categoryNo":138,"categoryName":139,"taxonomyType":113,"taxonomyTypeDesc":114},"01JBSEEDCAT000000000000030","开发工程师",[128,97,141,142,143,144,145,146,77,78,147,96,71,148,149],"cloud","manage","via","rest api","token","atlassian","jq","REST","developer",{"skillNo":151,"name":152,"nameZh":6,"description":153,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":9,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":154,"categories":155,"keywords":156,"publishedAt":28},"01M698YQ9Q3M4W78EWV2KSCSVW","tmux","Control tmux sessions\u002Fpanes for interactive CLIs: list, capture output, send keys, paste text, monitor prompts.","https:\u002F\u002Fgithub.com\u002Fopenclaw\u002Fopenclaw\u002Fblob\u002Fmain\u002Fskills\u002Ftmux\u002FSKILL.md",[],[152,77,157,158,70,159,160,161,162,163,164,165,78,166,167,168,169,170,171],"send","darwin","keys","paste","output","control","prompts","interactive","list","capture","panes","text","monitor","sessions","linux"]