openclaw-audit-watchdog

Review·Scanned 2/17/2026

This skill schedules daily openclaw security audits, renders reports, and delivers them by DM/email using the included scripts (scripts/runner.sh, scripts/run_audit_and_format.sh). It runs shell commands, reads env vars such as PROMPTSEC_DM_CHANNEL and PROMPTSEC_DM_TO, and performs network operations (e.g., curl "https://github.com/prompt-security/clawsec/releases/download/$VERSION_TAG/openclaw-audit-watchdog.skill" and SMTP to 127.0.0.1).

from clawhub.ai·v0.0.4·27.3 KB·0 installs
Scanned from 0.0.4 at d14cd16 · Transparency log ↗
$ vett add clawhub.ai/davida-ps/openclaw-audit-watchdogReview findings below

OpenClaw Audit Watchdog 🔭

Automated daily security audits for OpenClaw/Clawdbot agents with email reporting.

Overview

The Audit Watchdog provides automated security monitoring for your OpenClaw agent deployments:

  • Daily Security Scans - Scheduled via cron for continuous monitoring
  • Deep Audit Mode - Comprehensive analysis of agent configurations and behavior
  • Email Reporting - Formatted reports delivered to your security team
  • Git Integration - Optionally syncs latest configurations before audit

Quick Start

# Install skill
mkdir -p ~/.openclaw/skills/openclaw-audit-watchdog
cd ~/.openclaw/skills/openclaw-audit-watchdog

# Download and extract
curl -sSL "https://github.com/prompt-security/clawsec/releases/download/$VERSION_TAG/openclaw-audit-watchdog.skill" -o watchdog.skill
unzip watchdog.skill

# Configure
export PROMPTSEC_EMAIL_TO="security@yourcompany.com"
export PROMPTSEC_HOST_LABEL="prod-agent-1"

# Run
./scripts/runner.sh

Configuration

VariableDescriptionDefault
PROMPTSEC_EMAIL_TOEmail recipient for reportstarget@example.com
PROMPTSEC_HOST_LABELHost identifier in reportshostname
PROMPTSEC_GIT_PULLPull latest before audit (0/1)0

Scripts

ScriptPurpose
runner.shMain entry - runs full audit pipeline
run_audit_and_format.shCore audit execution
codex_review.shAI-assisted code review
render_report.mjsHTML report generation
sendmail_report.shLocal sendmail delivery
send_smtp.mjsSMTP email delivery
setup_cron.mjsCron job configuration

Requirements

  • bash
  • curl
  • Optional: node (for SMTP/rendering), jq (for JSON), sendmail (for email)

Cron Setup

# Daily at 6 AM
0 6 * * * /path/to/scripts/runner.sh

Or use the setup script:

node scripts/setup_cron.mjs

License

MIT - See LICENSE for details.


Part of ClawSec by Prompt Security