CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

healthcheck

Audit/harden OpenClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security.

Quality

85%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

93%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A lean, highly actionable instruction-only skill: executable read-only commands for three OSes, explicit safety gates around state changes, and a clear staged workflow. Its only gap is the absence of an explicit post-change verification/feedback step for the hardening phase.

DimensionReasoningScore

Conciseness

The body is lean and imperative throughout ('Ask only for missing facts. Simple phrasing preferred.') with zero padding; the single dense sentence about `doctor --lint` exit codes is genuinely non-obvious, tool-specific knowledge Claude would not already have.

5 / 5

Actionability

Fully executable, copy-paste-ready commands per platform (`openclaw security audit --deep`, `ss -ltnup || ss -ltnp`, `Get-NetFirewallProfile`) covering macOS, Linux, and Windows common cases, plus a concrete report shape and hardening menu.

5 / 5

Workflow Clarity

Clear sequence (infer context → one-time permission → read-only checks → posture selection → report → staged hardening) with approval checkpoints ('Ask before state-changing actions', 'Confirm exact action before applying') and rollback notes. Falls short of 5 because there is no explicit post-change verification loop (e.g., re-verify SSH/access still works after applying a hardening step).

4 / 5

Progressive Disclosure

No bundle files exist and none are needed: ~107 lines with well-organized section headers, no nested references, and no content that clearly belongs in a separate file — a navigable, self-contained SKILL.md.

5 / 5

Total

19

/

20

Passed

Description

70%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A terse, domain-specific description that clearly communicates what the skill does across seven concrete security areas, with excellent distinctiveness. Its main weakness is the complete absence of any 'when to use this' trigger guidance, which caps completeness and limits discoverability.

Suggestions

Add an explicit 'Use when...' clause, e.g.: 'Use when the user asks to audit, check, or harden the security of an OpenClaw host, or mentions SSH, firewall, or gateway exposure concerns.'

Convert the bare keyword list into a mix of action verbs and natural trigger phrases (e.g., 'check exposure', 'verify backups', 'security check') so the description doubles as a trigger surface for phrasings users actually say.

Include one or two synonyms of the skill's own name ('health check', 'security audit') so searches for those terms surface it.

DimensionReasoningScore

Specificity

'Audit/harden OpenClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security' names the domain and lists seven concrete check areas, matching 'several specific actions; minor gaps' — but the areas are bare keyword nouns rather than explicit action verbs, so it falls short of anchor 5's comprehensiveness.

4 / 5

Completeness

The 'what' is clear (audit and harden OpenClaw hosts across the listed areas), but there is no 'Use when...' clause or equivalent trigger guidance anywhere — the rubric explicitly caps completeness at 3 for this.

3 / 5

Trigger Term Quality

Natural terms like 'Audit', 'harden', 'SSH', 'firewall', 'backups', and 'disk encryption' are present, but common user phrasings ('security check', 'health check', 'is my server secure') are missing — good coverage with a few natural terms absent, matching anchor 4.

4 / 5

Distinctiveness Conflict Risk

Scoped specifically to 'OpenClaw hosts', a clear niche with distinct triggers and minimal risk of firing for unrelated skills, matching anchor 5.

5 / 5

Total

16

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

openclaw/openclaw

Path

skills/healthcheck/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.