← Back to Skills Marketplace
106
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install toolweb-fortigate-hardening
Description
Professional FortiGate security configuration generator based on CIS Benchmark standards for enterprise firewall hardening.
Usage Guidance
This skill appears to be a remote API that generates FortiGate configuration files. Before installing or using it, verify the service owner and hosting domain (there is no homepage in the package and the sample download_url references api.mkkpro.com/toolweb.in). Do not submit real production firewall details or secrets until you confirm data handling, retention, and encryption policies. Prefer testing with sanitized or dummy data first. If you need an offline or auditable hardening tool, ask the publisher for source code or an on-premise option (or use vendor-supplied CIS-hardening guidance). If you decide to proceed, require a written data-processing agreement and confirm the service uses HTTPS and explicit authentication; otherwise treat this as untrusted third-party processing of sensitive network configuration.
Capability Analysis
Type: OpenClaw Skill
Name: toolweb-fortigate-hardening
Version: 1.0.0
The skill bundle is a legitimate utility for generating FortiGate firewall hardening configurations based on CIS Benchmarks. It functions as an interface for a remote API (api.mkkpro.com) and does not request sensitive local information, execute unauthorized commands, or contain prompt-injection attacks. The code and documentation in SKILL.md and openapi.json are consistent with the stated purpose of security configuration generation.
Capability Assessment
Purpose & Capability
The skill claims to be an API that generates hardened FortiGate configs, and the included SKILL.md + openapi.json match that purpose (endpoints to generate and list options). However the SKILL.md references external domains (e.g., api.mkkpro.com and toolweb.in) while the package provides no authoritative homepage or server configuration; the source is 'unknown'. This incomplete provenance is a minor coherence issue.
Instruction Scope
The runtime instructions specify submitting hardening payloads (sessionId, userId, hardeningOptions) and returning a download_url. They do not instruct the agent to read local files or other unrelated system state, which is good. But they also do not include an explicit, trusted base URL or a data-handling/privacy disclosure — the example download_url points to an external host, which means the agent (or a user following the doc) may send potentially sensitive firewall configuration data to a third party.
Install Mechanism
No install spec and no code files (instruction-only). That minimizes local execution risk — nothing will be written to disk or auto-installed by the skill package itself.
Credentials
The skill requests no environment variables or credentials, which is consistent with a generator-only API that returns a file for manual application. However, because the skill's examples show an external download_url and pricing, a user might be expected to send sensitive firewall configuration data to a third-party service; the skill gives no guidance about credentials, encryption, retention, or privacy. Lack of clarity about where data goes and how it's protected is a proportionality concern.
Persistence & Privilege
The skill does not request always:true and is user-invocable only; it does not demand elevated persistence or modify other skills. Autonomous invocation is allowed by default but not combined with other red flags here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install toolweb-fortigate-hardening - After installation, invoke the skill by name or use
/toolweb-fortigate-hardening - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the FortiGate Security Hardening Tool.
- Provides API endpoints to generate FortiGate firewall configurations based on CIS Benchmark standards.
- Allows users to customize security hardening profiles with flexible options for firewall, SSL/TLS, admin access, logging, and authentication.
- Includes endpoints to view available configuration options and perform health checks.
- Supports multiple pricing plans with tiered API usage limits.
Metadata
Frequently Asked Questions
What is FortiGate Hardening?
Professional FortiGate security configuration generator based on CIS Benchmark standards for enterprise firewall hardening. It is an AI Agent Skill for Claude Code / OpenClaw, with 106 downloads so far.
How do I install FortiGate Hardening?
Run "/install toolweb-fortigate-hardening" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is FortiGate Hardening free?
Yes, FortiGate Hardening is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does FortiGate Hardening support?
FortiGate Hardening is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created FortiGate Hardening?
It is built and maintained by ToolWeb (@krishnakumarmahadevan-cmd); the current version is v1.0.0.
More Skills