OpenClaw Hardener

This skill provides a user-choice hardening tool that can:

• Run OpenClaw’s built-in security audit (openclaw security audit --deep / --fix).
• Run workspace hygiene checks (exec bits, stray .env, unsafe serialization patterns, etc.).
• Apply safe mechanical fixes only when explicitly requested.
• Generate (and optionally apply) a Gateway config.patch plan to tighten runtime policy.

Run the tool

Script:

• skills_live/openclaw-hardener/scripts/hardener.py

Examples:

# Read-only checks (recommended default)
python3 skills_live/openclaw-hardener/scripts/hardener.py check --all