Audit Log Firewall
/install audit-log-firewall
Audit Log Firewall
Security is a non-negotiable protocol for autonomous agents. This skill acts as a dynamic guardrail.
Operational Modes
1. Interception Mode
Every command is checked against a local allowlist (config/allowlist.json).
- High Risk: commands like
rm -rf,sudo, or directcurlto unknown external IPs. - Protocol: If a high-risk command is detected, the agent triggers a mandatory 'Pause and Ask' state.
2. Forensic Logging
All terminal activity is hashed and stored in .logs/SECURITY.json.
- Fields: Timestamp, Command, User, Working Directory, and Hash.
- Utility: Allows humans to reconstruct the agent's actions in case of a breach or error.
Installation
clawhub install audit-log-firewall
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install audit-log-firewall - After installation, invoke the skill by name or use
/audit-log-firewall - Provide required inputs per the skill's parameter spec and get structured output
What is Audit Log Firewall?
Policy-based monitoring and command-line enforcement for high-risk agent operations. Intercepts sensitive commands and logs them for human auditing. It is an AI Agent Skill for Claude Code / OpenClaw, with 422 downloads so far.
How do I install Audit Log Firewall?
Run "/install audit-log-firewall" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Audit Log Firewall free?
Yes, Audit Log Firewall is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Audit Log Firewall support?
Audit Log Firewall is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Audit Log Firewall?
It is built and maintained by balkanblbn (@balkanblbn); the current version is v1.0.0.