Setup Validator#

Overview#

This skill validates OpenClaw installations for security misconfigurations and setup issues. It runs during initial setup and periodically (e.g., via heartbeats or cron) to ensure ongoing safety.

Checks#

The validator checks for the following issues:

CheckDescriptionReferenceExcessive PermissionsEnsures OpenClaw and plugins have only necessary permissions.CHECKS.mdUnsafe PluginsIdentifies plugins from untrusted sources or with known vulnerabilities.CHECKS.mdMissing SandboxingValidates that sandboxing is properly configured.CHECKS.mdOutdated DependenciesChecks for outdated or vulnerable dependencies.CHECKS.md

See CHECKS.md for detailed descriptions of each check.

Setup#

Make Scripts Executable#

Before using the scripts, ensure they have executable permissions:

bash

chmod +x ~/.openclaw/skills/setup-validator/scripts/*.py

Usage#

Run Validation#

Execute the validation script to check for misconfigurations:

bash

python scripts/validate_setup.py

Generate Actionable Warnings#

If issues are detected, generate actionable warnings with fixes:

bash

python scripts/generate_warnings.py

Example Output#

plaintext

[WARNING] Excessive permissions detected for OpenClaw.
- Fix: Run `chmod 750 ~/.openclaw` to restrict permissions.

[WARNING] Unsafe plugin detected: example-plugin.
- Fix: Remove the plugin with `openclaw plugin remove example-plugin`.

Documentation#

• Detailed Checks
• Example Fixes

Periodic Validation#

To run this skill periodically (e.g., via cron or heartbeats), add the following to your cron jobs:

bash

0 * * * * python ~/.openclaw/skills/setup-validator/scripts/validate_setup.py