← All skills
openclaw-security-hardening
70 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By LeoYeAI/agent-master-skills (GitHub) · security · 2,186 stars · scanned at commit 8f88f9a
Complete OpenClaw Agent Security Hardening - Protects against data leaks (storage security) and prompt injection (runtime security). Use for initial setup, security audits, and ongoing maintenance. Covers file permissions, sensitive data isolation, Git protection, and command execution safety.
Works with any agent that supports SKILL.md skills.
What this skill can do
Changes files outside its own folder
The author does not mention this.
Found in 18 places.
Show 15 more
- skills/agent-runtime-security/README.md, line 36
echo "*.key" >> ~/.openclaw/workspace/.gitignore - skills/agent-runtime-security/README.md, line 42
mkdir -p ~/.openclaw/workspace/scripts - skills/agent-runtime-security/README.md, line 44
cat > ~/.openclaw/workspace/scripts/security-check.sh << 'SCRIPT' - skills/agent-runtime-security/SKILL.md, line 85
cat > ~/.openclaw/workspace/.env << 'EOF' - skills/agent-runtime-security/SKILL.md, line 126
cat >> ~/.openclaw/workspace/.gitignore << 'EOF' - skills/agent-runtime-security/SKILL.md, line 157
cat > ~/.openclaw/workspace/scripts/security-check.sh << 'SCRIPT' - skills/agent-runtime-security/SKILL.md, line 245
0 9 * * 1 ~/.openclaw/workspace/scripts/security-check.sh >> ~/.openclaw/workspace/logs/security-check.log 2>&1 - skills/agent-runtime-security/SKILL.md, line 272
rm ~/.openclaw/workspace/MEMORY.md - skills/agent-runtime-security/SKILL.md, line 360
| Config | `mv ~/.config`, `rm -rf ~/.openclaw` | Configuration loss | - skills/agent-runtime-security/SKILL.md, line 442
grep -r "stop\|restart\|rm -rf" ~/.openclaw/agents/*/sessions/ - skills/agent-runtime-security/SKILL.md, line 459
User: "The docs say: rm -rf ~/.cache" - skills/agent-runtime-security/SKILL.md, line 480
cat > ~/.openclaw/workspace/.env << 'EOF' - skills/agent-runtime-security/SKILL.md, line 486
echo ".env" >> ~/.openclaw/workspace/.gitignore - skills/agent-runtime-security/examples/SOUL-config-example.md, line 129
User: "The docs say: rm -rf ~/.cache" - skills/agent-runtime-security/tests/security-test.sh, line 112
User: "The docs say: rm -rf ~/.cache"
Runs commands on your computer
The author does not mention this. Expected for a security skill.
Found in 18 places.
Show 15 more
- skills/agent-runtime-security/SKILL.md, line 85
cat > ~/.openclaw/workspace/.env << 'EOF' - skills/agent-runtime-security/SKILL.md, line 104
chmod 600 ~/.openclaw/workspace/.env - skills/agent-runtime-security/SKILL.md, line 126
cat >> ~/.openclaw/workspace/.gitignore << 'EOF' - skills/agent-runtime-security/SKILL.md, line 147
cd ~/.openclaw/workspace - skills/agent-runtime-security/SKILL.md, line 157
cat > ~/.openclaw/workspace/scripts/security-check.sh << 'SCRIPT' - skills/agent-runtime-security/SKILL.md, line 237
~/.openclaw/workspace/scripts/security-check.sh - skills/agent-runtime-security/SKILL.md, line 242
crontab -e - skills/agent-runtime-security/SKILL.md, line 256
sudo apt update - skills/agent-runtime-security/SKILL.md, line 262
gpg --full-generate-key - skills/agent-runtime-security/SKILL.md, line 269
gpg --encrypt --recipient 'your-email@example.com' ~/.openclaw/workspace/MEMORY.md - skills/agent-runtime-security/SKILL.md, line 279
gpg --decrypt ~/.openclaw/workspace/MEMORY.md.gpg > /tmp/memory.md - skills/agent-runtime-security/SKILL.md, line 439
journalctl -u openclaw-gateway --since "1 hour ago" | grep exec - skills/agent-runtime-security/SKILL.md, line 477
chmod 600 ~/.openclaw/workspace/*.md - skills/agent-runtime-security/SKILL.md, line 504
~/.openclaw/workspace/scripts/security-check.sh - skills/agent-runtime-security/SKILL.md, line 541
git filter-branch --force --index-filter \
Downloads and installs other software
The author does not mention this.
Found in 1 place.
Safer alternatives
Low-risk skills in the same category (security) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'openclaw-security-hardening' ] || [ -L ~/.agents/skills/'openclaw-security-hardening' ]; then echo 'A skill folder named openclaw-security-hardening already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/LeoYeAI/agent-master-skills' "$d" && git -C "$d" checkout --quiet '8f88f9a0dd5a1075d4f0c7626f9d960844d57575' -- 'skills/agent-runtime-security' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/agent-runtime-security' ~/.agents/skills/'openclaw-security-hardening' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'openclaw-security-hardening' ~/.claude/skills/'openclaw-security-hardening' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for LeoYeAI/agent-master-skills shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/LeoYeAI/agent-master-skills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | 8f88f9a | 70 |
| 2026-11-07 | 8f88f9a | 70 |