ClawVitals
OpenClaw skill for security health checks and recurring posture tracking. Install via: clawhub install clawvitals
Choose how to use this skill
You do not need every option. Choose the path your AI client supports. The stable page stays the same; versioned files are immutable.
1. Native installer
This listing has no registered native installer command. Use the complete package or source fallback below, depending on what your client supports.
Do not guess an installer command or replace an existing version without reviewing the diff.
2. Complete package recommended
Download the ZIP when available. It includes SKILL.md plus the references, security notes and version metadata.
No complete ProSkills package is published for this listing yet.3. Prompt-only
Copy the prompt above when the agent can read the stable page or when you want to adopt the workflow without installing a skill.
Need only the instruction file?
Download SKILL.md only if your client requires a single file. The complete ZIP is safer for a full installation because it preserves the references and release context.
No path installs or executes anything by itself. Your agent still needs access to the project files. Before updating, compare the installed version and review the diff.
// RATINGS
Not yet listed on ClawHub or SkillsMP
// README
ClawVitals
Security health check for self-hosted OpenClaw installations.
Check your OpenClaw security vitals — scans your installation, scores your setup, and shows you exactly what to fix.
Repository structure
skill/ → ClawHub skill (instruction-based, stateless)
plugin/ → OpenClaw plugin (runtime, persistent) — coming soon
shared/
controls/ → Control library (shared between skill and plugin)
Skills
Two ClawHub slugs, one source. Both are built from skill/SKILL.md — content is identical, only the name differs.
| Slug | Install | Purpose |
|---|---|---|
clawvitals | npx clawhub install clawvitals | Primary brand |
securityvitals | npx clawhub install securityvitals | Search discoverability ("security vitals") |
Both point to clawvitals.io. One may be deprecated in future.
→ skill/README.md · clawvitals.io/docs
Publishing
Use the publish script to keep both skills in sync:
./scripts/publish.sh <version> "<changelog message>"
This publishes clawvitals and securityvitals atomically from the same skill/ source. Never publish one without the other.
Plugin
The plugin adds scan history, delta detection, scheduled scans, exclusion management, and telemetry. Coming soon.
# When available:
openclaw plugins install @anguarda/clawvitals
License
MIT — see skill/LICENSE
// HOW IT'S BUILT
KEY FILES