Security Audit Skill

When to use

Run a security audit to identify vulnerabilities in your Clawdbot setup before deployment or on a schedule. Use auto-fix to remediate common issues automatically.

Setup

No external dependencies required. Uses native system tools where available.

How to

Quick audit (common issues)

CODEBLOCK0

Full audit (comprehensive scan)

CODEBLOCK1

Auto-fix common issues

CODEBLOCK2

Audit specific areas

CODEBLOCK3

Generate report

CODEBLOCK4

Output

The audit produces a report with:

Checks Performed

Credentials

• - API keys in environment files
• Tokens in command history
• Hardcoded secrets in code
• Weak password patterns

Ports

• - Unexpected open ports
• Services exposed to internet
• Missing firewall rules

Configs

• - Missing rate limiting
• Disabled authentication
• Default credentials
• Open CORS policies

Files

• - World-readable files
• Executable by anyone
• Sensitive files in public dirs

Docker

• - Privileged containers
• Missing resource limits
• Root user in container

Auto-Fix

The --fix option automatically:

• - Sets restrictive file permissions (600 on .env)
• Secures sensitive configuration files
• Creates .gitignore if missing
• Enables basic security headers

Related skills

• - security-monitor - Real-time monitoring (available separately)