Route OpenClaw CLI requests to the right command family and profile, then verify the outcome.
334 installs6 stars
Security
Setup
Configure OpenClaw installations with optimized settings, channel setup, security hardening, and production recommendations.
What it does
| Task | Load | |------|------| | Messaging channels (Telegram, WhatsApp, Discord, etc.) | | | Agent settings, models, workspaces | | | Security, auth, DM policies, allowlists | | | Tools: exec, browser, web, media | | | Cron, hooks, heartbeats, automation | | | Recommendations by use case |…
The skill document
Quick Reference
| Task | Load |
|---|---|
| Messaging channels (Telegram, WhatsApp, Discord, etc.) | channels.md |
| Agent settings, models, workspaces | agents.md |
| Security, auth, DM policies, allowlists | security.md |
| Tools: exec, browser, web, media | tools.md |
| Cron, hooks, heartbeats, automation | automation.md |
| Recommendations by use case | recommendations.md |
| Memory search, embeddings, QMD | memory.md |
| Gateway: port, TLS, Tailscale, remote | gateway.md |
First Setup Checklist
Before any config, run:
openclaw onboard --install-daemon # Full wizard
openclaw doctor # Check issues
Minimum viable config:
- At least one channel connected (Telegram recommended for testing)
- Model configured (Anthropic Claude or OpenAI)
- Workspace path set (
agents.defaults.workspace) - Owner allowlist configured (your user ID in
channels.*.allowFrom)
Config Locations
| File | Purpose |
|---|---|
~/.openclaw/openclaw.json | Main config |
~/.openclaw/.env | Environment variables |
~/.openclaw/workspace/ | Default workspace |
~/.openclaw/sessions/ | Session storage |
Hot reload: Most settings apply instantly. Gateway settings (port, TLS) require restart.
Common Mistakes to Avoid
- Open DM policy without allowlist → Anyone can message your bot
- No auth token on remote gateway → Exposed to internet
- Model without fallbacks → Single point of failure
- Heartbeat without delivery target → Lost proactive messages
- exec.security: "full" in groups → Dangerous command access
When You're Done
openclaw doctor # Verify config
openclaw status # Check runtime
openclaw health # Gateway health
Related skills
Subscribe AI agents to a community-curated security advisory feed for AI-agent threats.
by davida-ps103 installs1 stars
Manage and enforce least-privilege execution, approval-based elevation, port and egress monitoring, and ISO 27001/NIST compliance reporting for OpenClaw secu...
60 installs
Operate and extend the read-only OpenClaw dashboard backend, frontend tabs, and security model.
174 installs9 stars
A curated, weekly-updated collection of 11211+ OpenClaw agent skills across 14 categories.
170 installs3 stars
Manage Notes, Tasks, Calendar, Files, Contacts, and Deck boards in your Nextcloud instance via CLI commands.
187 installs9 stars
More from Iván
Browse all skillsRun Git operations — commits, branches, merges, rebases, conflict resolution, and recovery — with safety rules enforced.
by Iván527 installs31 stars
Create and critique visual artifacts with quantified rules for hierarchy, spacing, type scale, color, and layout.
by Iván137 installs5 stars
Debug CSS mechanics and write component stylesheets grounded in named mechanisms, not trial-and-error.
by Iván97 installs5 stars
Plans and runs self-directed learning as a system: exit test, spaced review, deliberate practice, and transfer proof.
by Iván93 installs3 stars
Get Azure architecture, debugging, security, and cost reviews grounded in a live inventory of your subscription.
by Iván86 installs2 stars
Diagnoses Java and JVM issues from exception messages to container OOM-kills, and writes Java code matching the configured JDK.
by Iván130 installs9 stars