OpenClaw Janitor Skill for Automated System Management and Security Hardening
A developer has created a skill for managing OpenClaw systems through automated configuration and security hardening. The approach addresses the common challenge where OpenClaw setups tend to be either overly secure and non-functional or useful but potentially dangerous.
Key Implementation Details
The developer configured Claude Code to SSH into the OpenClaw machine and execute hardening tasks including:
- OpenClaw configuration adjustments
- Sandboxing implementation
- General OS hygiene improvements
- Channel security for Telegram, Discord, and other communication platforms
- Access control configuration (determining who can write to the agent)
Project Structure and Documentation
The system maintains a "project folder" containing:
- All relevant OpenClaw information
- A
CLAUDE.mdfile with instructions for: - Auditing the OpenClaw system after upgrades
- Performing maintenance and security checks
- Verifying skill security
Risk Management Strategies
The developer recommends using a subscription with the main OpenClaw agent instead of direct API access to prevent unexpected costs from infinite loops or other issues. They note this approach reduces exposure to scenarios like waking up to a €2,000 API bill from agent misbehavior.
Skill Functionality
The claw-janitor skill, available at codeberg.org/rine/skills, offers to create the project folder if it doesn't exist and manages the ongoing maintenance process. The developer emphasizes trusting the AI to "figure it out" by itself, with the expectation that it will report failures and that proper sandboxing will minimize the cost of those failures.
📖 Read the full source: r/openclaw
👀 See Also
VS Code Agent Kanban: Markdown-based task management for AI coding agents
VS Code Agent Kanban is an extension that creates a GitOps-friendly kanban board inside VS Code using markdown files as task records. It addresses context rot in AI coding agents by preserving planning conversations, decisions, and implementation details in version-controlled .md files.
Open Source SQLite-Based Persistent Memory System for Claude
A developer has released memchat, a GPL-licensed local system that extracts knowledge from Claude sessions at checkpoints, stores it in SQLite, and reassembles it for new sessions to maintain context across conversations.
Claude Code Voice Mode: Hands-Free AI Conversations for Developers
Claude's voice mode beta lets you speak to the AI and hear responses, with hands-free and push-to-talk options. It works on web and mobile, counts toward regular usage limits, and allows switching between text and voice in the same conversation.
Bernstein: A Kubernetes-like orchestrator for AI coding agents with verification and model policies
Bernstein is an orchestrator for AI coding agents that includes independent verification of agent outputs, model policy controls, 13 agent adapters, and deterministic Python-based scheduling. The project has 5000+ tests and features like circuit breakers, cost anomaly detection, and PII scanning.