Is skills/healthcheck safe?
Yes. skills/healthcheck is safe to install. Oathe's behavioral security audit gave the healthcheck skill by skills a trust score of 91/100 with 2 findings, none critical or high.
https://github.com/openclaw/openclaw/tree/main/skills/healthcheck
Is skills/healthcheck safe to install?
This is a legitimate security hardening skill for OpenClaw deployments that helps assess and improve host security posture. It requires explicit user approval for all actions and has appropriate safeguards, but does access sensitive system files as part of its security scanning functionality.
What security issues were found in skills/healthcheck?
Category Scores
Findings (2)
MEDIUM Access to Sensitive Credential Files -25 ▶
The skill accessed honeypot credential files including .env, SSH private keys, AWS credentials, .npmrc, Docker config, and GCloud credentials during execution. While this appears to be for legitimate security scanning purposes and the files were not modified or exfiltrated, accessing sensitive credentials raises security concerns.
LOW Canary File Access Without Modification -5 ▶
Honeypot files were accessed but not modified, suggesting the skill scanned sensitive files as part of its security assessment function without attempting to exfiltrate their contents.
Should I install skills/healthcheck?
Oathe's verdict for skills/healthcheck is SAFE with a trust score of 91/100. Recommendation: Install with caution.