自动配置 FortiGate 防火墙，支持基础策略管理及工控协议（Modbus、IEC104、S7等）的安全配置。

This skill appears to do what it says (automate FortiGate configuration) and only asks for FortiGate connection info. Before installing: 1) Review the complete scripts/main.py (the source provided to me ends truncated — ensure you have the full file and inspect it for unexpected network calls or obfuscated code). 2) Treat FORTIGATE_TOKEN as highly sensitive: use a least-privilege API token/service account and store it in a secure secret store, not a plaintext env var if possible. 3) Set FORTIGATE_VERIFY_SSL=true and use valid certificates in production — the code disables SSL warnings and defaults to not verifying which risks MITM. 4) Test in a lab or on a non-production device first (these operations can change firewall and ICS connectivity). 5) If you allow autonomous invocation, be aware the agent could make changes to your firewall when the skill runs; consider limiting when/how the agent can call this skill. If you provide the full, untruncated source I can raise or lower confidence after reviewing it.

Type: OpenClaw Skill Name: fortigate-config Version: 1.0.0 The skill is a legitimate automation tool for managing FortiGate firewall configurations via its REST API, with specific enhancements for Industrial Control Systems (ICS) protocols. The code in `scripts/main.py` implements standard CRUD operations for firewall policies, address objects, and industrial security profiles using the `requests` library. It follows security best practices by using environment variables for sensitive credentials (host and token) and includes options for SSL verification. No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found.