healthcheck

The healthcheck skill is designed to audit and harden hosts managed with OpenClaw, focusing on SSH, firewall settings, system updates, network exposure, backups, disk encryption, and gateway security. Its primary goal is to help users assess the risk level of their systems, run read-only checks safely, and propose a staged hardening plan without interrupting access. By performing context-aware analysis and offering actionable recommendations, it addresses the challenge of maintaining secure configurations on diverse environments while minimizing operational risks.

This skill offers structured features including read-only system audits across macOS, Linux, and Windows platforms. It guides users in gathering host context such as OS/version, privilege levels, network exposure, backup and disk encryption status, and security update configuration. It generates a risk profile based on the desired security posture—convenience, balanced, or strict—and provides a clear report outlining current posture, findings with severity, and a reversible hardening plan. Users receive numbered recommendations and can approve state-changing actions selectively. The skill emphasizes safety by avoiding direct changes to critical components like SSH or firewalls until access paths are verified and by never exposing sensitive data or secrets.

Healthcheck is suitable for system administrators, security-conscious users, and operators of personal or remote servers who need a guided, safe approach to hardening their systems. It is particularly useful in environments where multiple access methods exist or where hosts are exposed to public networks. Its staged, reversible recommendations make it ideal for both personal workstations and organizational servers, allowing users to incrementally improve security without risking loss of access or disruption of essential services.