Before you go live, run this command: openclaw security audit. OpenClaw ships with a built-in security audit that scans your entire Gateway configuration for vulnerabilities.
What does it check for? Agents with the Lethal Trifecta and overly permissive tool access. It also flags missing mention gating on group chats and agents without fallback models. Each finding gets a severity rating. Fix all critical ones before going live. Warnings are worth addressing but won't immediately put you at risk. Run the audit after each configuration change to catch regressions. Make it a habit.