Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Clawstrike audits an OpenClaw deployment for misconfigurations and exploitable attack paths. It collects system evidence through a verified script, then evaluates gateway exposure, filesystem hygiene, plugin supply chain, and network posture. The output is a structured OK/VULNERABLE report with severity ratings, evidence excerpts, and remediation steps.
It enforces a strict verified-collection mode and redaction rules, which prevents the audit itself from becoming an attack surface or leaking secrets during the review.
When to use it
- Checking an OpenClaw host before exposing it to a new network
- Reviewing third-party skill/plugin files for supply chain risks
- Verifying firewall and port configuration on a self-hosted gateway
- Auditing filesystem permissions and SUID/SGID binaries on a gateway host
- Generating a security report for a team handoff or compliance review
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: run a full security audit of my OpenClaw gateway
- 1Executes scripts/collect_verified.sh in the working directory to gather evidence
- 2Reads verified-bundle.json and builds the report header with timestamp, OS, version, and config path
- 3Evaluates every check in references/required-checks.md against collected evidence
- 4Applies threat model from references/threat-model.md aligned with findings
- 5Emits a findings table with severity, evidence excerpts, and fix instructions
A structured OK/VULNERABLE report listing each check result with redacted evidence and specific remediation steps for any failures