OpenClaw Janitor Skill for Automated System Management and Security Hardening
A developer has created a skill for managing OpenClaw systems through automated configuration and security hardening. The approach addresses the common challenge where OpenClaw setups tend to be either overly secure and non-functional or useful but potentially dangerous.
Key Implementation Details
The developer configured Claude Code to SSH into the OpenClaw machine and execute hardening tasks including:
- OpenClaw configuration adjustments
- Sandboxing implementation
- General OS hygiene improvements
- Channel security for Telegram, Discord, and other communication platforms
- Access control configuration (determining who can write to the agent)
Project Structure and Documentation
The system maintains a "project folder" containing:
- All relevant OpenClaw information
- A
CLAUDE.mdfile with instructions for: - Auditing the OpenClaw system after upgrades
- Performing maintenance and security checks
- Verifying skill security
Risk Management Strategies
The developer recommends using a subscription with the main OpenClaw agent instead of direct API access to prevent unexpected costs from infinite loops or other issues. They note this approach reduces exposure to scenarios like waking up to a €2,000 API bill from agent misbehavior.
Skill Functionality
The claw-janitor skill, available at codeberg.org/rine/skills, offers to create the project folder if it doesn't exist and manages the ongoing maintenance process. The developer emphasizes trusting the AI to "figure it out" by itself, with the expectation that it will report failures and that proper sandboxing will minimize the cost of those failures.
📖 Read the full source: r/openclaw
👀 See Also
YourMemory: AI memory with biological decay hits 59% recall on LoCoMo-10
YourMemory gives AI agents persistent memory using Ebbinghaus forgetting curve and graph-enhanced retrieval. Benchmarked at 59% Recall@5 on LoCoMo-10, 2× better than Zep Cloud.
Hyper iOS App: Voice Recorder with Real-Time Transcription and Action Extraction
Hyper is an iOS voice recorder app that transcribes conversations in real-time, provides summaries and action items, and allows mid-conversation queries via wakeword detection. It's designed for unstructured meetings like 1:1s, coffee chats, and standups.
How Mendral Cut LLM Costs by Upgrading to Opus: Triager Pattern, SQL Access, and Sub-Agent Architecture
Mendral switched from Sonnet to Opus 4.6 for CI failure analysis but reduced costs by using a Haiku triager to divert 80% of failures, giving agents SQL access to ClickHouse instead of pushing logs, and spawning cheap sub-agents to do the actual digging.
AutoDream: 11-hook memory system for Claude Code with safety features
AutoDream is an open-source tool that adds project memory persistence and command safety to Claude Code. It uses 11 hooks across 6 events to inject context, block dangerous commands, and survive the /compact operation.