# openclaw-security-watchdog

Runs automated security inspections across 14 areas and produces readable status reports. Useful for catching exposed secrets, misconfigured permissions, and backdoor tasks.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 1000 installs · ★ 12
- Author: reason-machines
- License: LicenseRef-Unknown · policy=link-only · description only; the file stays with the author
- Source: https://github.com/reason-machines/security-skills/tree/HEAD/skills/openclaw-security-watchdog/SKILL.md
- Updated: 2026-10-09
- HTML: https://affpapa.org/en/nevibecode/skills/openclaw-security-watchdog

## What it does

The scanner evaluates system integrity across multiple vectors. It examines Node.js runtime status, sensitive directory permissions, scheduled cron tasks, and network entry points. Code scanning detects hardcoded API tokens or credentials directly inside repository files.

Two operational modes are available. Local-only mode runs entirely offline, keeping all telemetry strictly on your machine. The full profile queries threat databases, which requires setting up the `OPENCLAW_THREAT_INTEL_API_KEY` environment variable.

Execution requires Node.js v18 or later. Without this runtime version, the inspection script will fail. Findings are written to `~/.openclaw/security-reports/` with categorized risk ratings.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill openclaw-security-watchdog -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/openclaw-security-watchdog/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/openclaw-security-watchdog/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill openclaw-security-watchdog -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/openclaw-security-watchdog/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill openclaw-security-watchdog -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/openclaw-security-watchdog/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install reason-machines/security-skills openclaw-security-watchdog
```

2. **Manually: put the files in place**
- File: `.github/skills/openclaw-security-watchdog/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill openclaw-security-watchdog -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/reason-machines/security-skills --path skills/openclaw-security-watchdog
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/openclaw-security-watchdog/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill openclaw-security-watchdog -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/reason-machines/security-skills/tree/HEAD/skills/openclaw-security-watchdog/SKILL.md

## When to use it
- detect hardcoded secrets and tokens in repository source files
- audit critical file permissions and privilege escalation risks
- inspect cron jobs and scheduled tasks for persistence backdoors
- verify component supply chain integrity and package checksums

## Example prompts
- Run a security audit on the current system
- Check network exposure and anomalous active processes
- Execute a local-only security inspection

## Similar
- [git-guardrails-claude-code](https://affpapa.org/en/nevibecode/skills/git-guardrails-claude-code.md) — skill · 499069 installs
- [ponytail-review](https://affpapa.org/en/nevibecode/skills/ponytail-review.md) — skill · 57000 installs
- [ponytail-audit](https://affpapa.org/en/nevibecode/skills/ponytail-audit.md) — skill · 45400 installs
- [security-audit](https://affpapa.org/en/nevibecode/skills/cloudflare-security-audit.md) — skill · 54800 installs
- [security-and-hardening](https://affpapa.org/en/nevibecode/skills/security-and-hardening.md) — skill · 70200 installs
- [supabase](https://affpapa.org/en/nevibecode/skills/supabase.md) — skill · 8 installs

From the same set: [reason-machines/security-skills](https://affpapa.org/en/nevibecode/by/reason-machines/security-skills.md) — 69 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md