cathrynlavery

Openclaw Ops — Security skill for Claude Code

Security community

OpenClaw operations skill with health checks, repair scripts, watchdogs, update triage, and security scans.

How to install Openclaw Ops

This entry records only its repository, not the path inside it, so there is no exact command to give. Open cathrynlavery/openclaw-ops and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Openclaw Ops does

OpenClaw operations skill with health checks, repair scripts, watchdogs, update triage, and security scans.

Alternatives in Security

Google MCP Security Servers — Security Operations and Threat Intelligence MCP servers 453 ★
Perplexity Super Skills — Complete collection of 12 Perplexity Computer Super-Skills merging Perplexity + Claude Code capabilities acros 346 ★
Sovereign Skills — 20 production-grade skills for AI coding agents — setup, scope, discipline, code review, security, session man 125 ★

README

openclaw-ops

OpenClaw gateway operations skill for agent environments. Covers health checks, repair workflows, continuous monitoring, session analysis, update-change detection, and security review for a local or self-hosted OpenClaw install.

Tested against OpenClaw `2026.5.4`.

What it does

Skill

/openclaw-ops — full triage and configuration: gateway, auth, exec approvals, cron jobs, channels, sessions, and installation

Scripts

Script	Purpose
`scripts/heal.sh`	One-shot auto-fix for the most common gateway issues
`scripts/post-update.sh`	Explicit post-update orchestrator: check-update, heal, workspace reconcile, security scan, final health check, policy-guard sentinel trigger
`scripts/watchdog.sh`	Runs every 5 min, restarts gateway if down, escalates after 3 failures
`scripts/watchdog-install.sh`	Installs the watchdog as a macOS LaunchAgent
`scripts/watchdog-uninstall.sh`	Removes the LaunchAgent
`scripts/check-update.sh`	Detects version changes, explains broken config, auto-fix with `--fix`
`scripts/health-check.sh`	Declarative URL/process health checks; auto-generates targets file on first run
`scripts/security-scan.sh`	Config hardening and credential exposure scan (0–100 score); skips bulky runtime/log/session history unless `--include-sessions` is passed
`scripts/skill-audit.sh`	Static security audit for third-party skills before installation
`scripts/codex-perf-check.sh`	Check and fix GPT-5.x performance opt-ins that ship disabled by default; `--fix` to apply
`scripts/workspace-auto-commit.sh`	Local-only git snapshot helper for OpenClaw workspace repos; defaults to `~/.openclaw/workspace`, supports `--workspace` and `--all`, never pushes
`scripts/workspace-git-audit.sh`	Audits `~/.openclaw/workspace*` repos for git status and auto-commit cron coverage; `--show-cron` prints setup commands for uncovered repos
`scripts/session-monitor.sh`