← 返回 Skills 市场
553
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install openclaw-security-policy-check
功能描述
Automates security audits for OpenClaw gateway by checking key configuration settings to identify and report common security risks.
安全使用建议
This skill appears to do what it claims: read your OpenClaw config (~/.openclaw/openclaw.json), report insecure settings, and invoke the local 'openclaw security audit --deep'. Before installing/running: (1) verify you trust the skill source (no homepage and unknown owner in metadata); (2) note the metadata did not declare the required 'openclaw' binary—ensure that CLI is the official one you trust; (3) back up your config file as advised; (4) understand that while this script does not exfiltrate data itself, the OpenClaw CLI it calls could perform network actions depending on its implementation, so review/confirm the CLI behavior if network confidentiality is a concern. If you cannot verify the author, review the included script contents (they are short and readable) before running.
功能分析
Type: OpenClaw Skill
Name: openclaw-security-policy-check
Version: 0.1.0
The skill bundle is a security audit tool designed to check OpenClaw gateway configurations for common risks. The script `scripts/audit.cjs` reads the local configuration file (`~/.openclaw/openclaw.json`), identifies insecure settings (such as weak tokens or broad network bindings), and executes a legitimate system command (`openclaw security audit --deep`) to provide a report. It does not exfiltrate data, masks sensitive tokens in its output, and contains no evidence of malicious intent or obfuscation.
能力评估
Purpose & Capability
Overall coherent: the name/description, SKILL.md and script all focus on auditing OpenClaw configuration. Minor inconsistency: the registry metadata declares no required binaries, but both SKILL.md and the script explicitly require the local 'openclaw' CLI to be installed and executable.
Instruction Scope
Runtime instructions and the script only read the user's OpenClaw config at ~/.openclaw/openclaw.json, perform local checks, print a report, and run 'openclaw security audit --deep'. There is no code that reads unrelated system paths or environment variables, nor does the script itself transmit data to external endpoints.
Install Mechanism
No install spec — instruction-only plus a local script. Nothing is downloaded or written during install; the single included script is executed by the user/agent.
Credentials
No environment variables, secrets, or external credentials are requested. The script reads only the gateway config file (appropriate for an audit tool) and masks tokens in reports; this access is proportionate to the stated purpose.
Persistence & Privilege
Does not request persistent/always-on privileges and does not modify other skills or system-wide agent settings. It only runs on user invocation (or autonomous invocation if allowed by the platform) and performs read-only checks plus invoking the local OpenClaw CLI.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-security-policy-check - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-security-policy-check触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release of OpenClaw Security Policy Check
- Automates security audits for OpenClaw gateway configurations.
- Checks five critical security settings and flags unsafe values.
- Reads configuration from ~/.openclaw/openclaw.json automatically.
- Generates audit reports with findings and recommended fixes.
- Designed for routine inspections, pre-deployment hardening, and risk detection.
元数据
常见问题
OpenClaw Security Audit 是什么？
Automates security audits for OpenClaw gateway by checking key configuration settings to identify and report common security risks. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 553 次。
如何安装 OpenClaw Security Audit？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-security-policy-check」即可一键安装，无需额外配置。
OpenClaw Security Audit 是免费的吗？
是的，OpenClaw Security Audit 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
OpenClaw Security Audit 支持哪些平台？
OpenClaw Security Audit 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 OpenClaw Security Audit？
由 ASantsSec（@asantssec）开发并维护，当前版本 v0.1.0。
推荐 Skills