This sets up an unattended cron job that runs openclaw security audits daily at 11pm and delivers formatted reports via DM and optionally email. It handles both interactive setup and environment variable configuration for MDM deployments, which is smart for fleet management. The verification script is thorough, checking GPG signatures against a pinned public key before you extract anything. One thing to watch: it creates recurring jobs that phone home on a schedule, so review your DM targets and SMTP config carefully before enabling it on production hosts. The bundled vs standalone installation choice is nice for teams that only want the watchdog without the full ClawSec suite.
npx skills add https://github.com/prompt-security/clawsec --skill openclaw-audit-watchdog