Works with the AI tools you already use
Claude Code
Cursor
Codex CLI
Muse
Dots+22 moreClaude CodeCursorCodex CLIMuseDots
OpenClaw
Manus
Grok
Grok Bot+18 agentsOpenClaw Setup Hardening Automation Pack
Secure, harden, and automate your OpenClaw Gateway with production-grade security tiers and daily cron routines.
$15
OpenClaw Setup Hardening Automation Pack
Example session with this skill installed
I just installed OpenClaw on a Raspberry Pi. I want to make sure it is secure and I need a morning brief scheduled for 8 AM.
- Read your context and instructions
- Compiled the openclaw setup hardening
- Generated the document
I will begin the onboarding and hardening process for your Raspberry Pi setup. I'll start with a discovery check to verify the environment before applying Recommended tier security controls and scheduling your morning brief.
Discovery and Initial Audit
I have performed a read-only scan of the environment. The gateway is currently running as root, which is a high-risk finding for a Pi-based setup.
| Metric | Status |
|---|---|
| OS | Linux (Raspbian) |
| OpenClaw Version | v0.8.2 |
| Gateway Bind | 0.0.0.0 (Exposed) |
| Auth Status | Disabled |
| Health Check | 2 warnings found |
Security Hardening Plan
I have prepared the following hardening commands to lock down the instance.
# 1. Restrict gateway to loopback only
openclaw config set gateway.bind loopback
# 2. Enable authentication and set reference to env var
openclaw config set-ref gateway.auth.token env OPENCLAW_TOKEN
# 3. Secure the state directory
chmod 700 ~/.openclaw
chmod 600 ~/.openclaw/openclaw.json
# 4. Schedule the Morning Brief (08:00 daily)
openclaw cron add --name "Morning brief" --cron "0 8 * * *" --tz "Europe/London" \
--session isolated --announce --channel telegram --to "admin" --tools read \
--message "Prepare a brief for today: calendar prep and urgent alerts. Max 8 lines."
Setup Report Summary
The instance is transitioning to
Recommended tier. The binding change will prevent external network scans from hitting your gateway port. The morning brief is configured in an isolated session, meaning it cannot modify its own schedule or security settings.
Next steps
- Run
export OPENCLAW_TOKEN=$(openssl rand -hex 32)and add it to your.bashrcor service file. - Confirm the Telegram channel ID for delivery.
- Approve the
openclaw gateway restartto apply the loopback binding.
openclaw-setup-hardening-automation-pack.pdf
PDF · document
Example file from a real run - the skill writes it into your workspace.
Connects securely to your tools. The creator never sees your data.
About this skill
Deploying a self-hosted agent gateway like OpenClaw introduces significant surface area for remote-control attacks and prompt injection. This skill provides a guided, safety-first workflow to transition from an unconfigured install to a locked-down, self-monitoring production environment. It prioritizes read-only inspection, least-privilege configuration, and verifiable security tiers to ensure your personal agent remains under your control.
What it does
- Gateway hardening implements binding to loopback, secret references via environment variables, and strict file system permissions.
- Security auditing runs built-in deep checks and applies the tier-based hardening checklist (Baseline, Recommended, or Strict).
- Automation scheduling configures morning briefs, nightly health checks, and weekly security reports using native cron and heartbeat primitives.
- Skill vetting provides a structured framework for reviewing third-party plugins and skills for malicious patterns or data exfiltration.
- Incident response offers a dedicated recovery protocol for suspected compromises, including service suspension and credential rotation.
How it works
- Discovery executes a compact discovery phase to detect OS, host type, and existing configuration health.
- Hardening applies the selected security tier (Baseline, Recommended, or Strict) and verifies results with
openclaw security audit. - Automation sets up isolated cron jobs and
HEARTBEAT.mdtasks for proactive monitoring. - Reporting delivers a final Setup Report with a hardening scorecard and maintenance calendar.
Frameworks & tools
This skill is designed for OpenClaw Gateways running on Linux, macOS (Mac mini/laptop), Raspberry Pi, or Docker. It utilizes node.js, systemd, launchd, and the openclaw CLI.
Why this beats prompting it yourself
Generic prompts often ignore the risk of agents rewriting their own security configs or failing to handle secrets as environment references. This skill enforces a non-negotiable "read-only first" policy and uses precise CLI commands over manual JSON editing to prevent gateway start failures.
Use cases
- Secure a new install on a home server or VPS to prevent unauthorized remote access.
- Audit existing setups to identify plaintext keys or overly permissive tool access.
- Build daily routines like morning briefs and nightly health checks without manual prompting.
- Vet third-party skills for hidden network calls or obfuscated code before installation.
Known limitations
Requires a functional Node.js environment. Deep hardening on Windows/WSL may have limited daemon support compared to native Linux or macOS.
How to install
Works the same in every agent - Claude, Cursor, Codex, Copilot and 20+ more.
- 1
Download the ZIP
Free skills download straight away. Paid skills unlock right after purchase.
- 2
Unzip into your skills folder
Every agent reads skills from one folder on your machine. Drop the unzipped folder in there.
- 3
Ask your agent to use it
Restart the agent if it was already running. It picks the skill up automatically - no config needed.
Skills folder by agent
Click the path to copy it. Create the folder if it does not exist yet.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
30-day refund
Not a fit? Get your money back
Trust & safety
Security scanned
Verified clean today
- Passed all security checks, Safe to install
Needs access to
Openclaw