Install guide
Get your first OpenClaw security score in seconds.
Requirements
- OpenClaw 2026.3.13 or later
- Node.js 20 or later
- A configured messaging surface (Slack, Signal, Telegram, etc.)
Skill
Install
Install via ClawHub
Run this command in your terminal:
That's it the skill is now available in your OpenClaw installation.
Usage
Run a scan
In your OpenClaw messaging surface (Slack, Signal, etc.), send:
You'll receive a score, RAG band, and a summary of any failing controls with exact remediation steps.
See the full breakdown
For a control-by-control view with detailed remediation:
ℹ️ Stateless skill ClawVitals stores nothing between sessions. Every run clawvitals is a fresh point-in-time scan. Scan history, scheduled recurring scans, exclusion management, and telemetry are part of the ClawVitals plugin.
Update
To update the skill to the latest version, run in your OpenClaw messaging surface:
Or via terminal:
Start a new session after updating for the new SKILL.md to take effect.
Uninstall
To remove the skill:
The skill is stateless there is no stored data or config to clean up.
Plugin
Install the plugin
Install via ClawHub
Runs independently the ClawVitals skill does not need to be installed.
Confirm installation
Expected output:
Run a standard scan
Optional: run expanded scan
Adds 8 system-level checks see expanded controls.
Update the plugin
In your OpenClaw messaging surface:
Or via terminal:
Start a new session after updating for changes to take effect.
Uninstall the plugin
Remove scheduled cron job
Uninstall via ClawHub
Uninstalling does not delete your scan history. Run files are kept in ~/.openclaw/workspace/clawvitals/runs/ per your retention policy (default: 90 days).