← 返回 Skills 市场
134
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install sox-compliance
功能描述
Enterprise-grade Sarbanes-Oxley assessment platform that evaluates organizational compliance with SOX requirements across multiple control domains.
安全使用建议
This skill documents an external SOX assessment API but has no publisher/homepage and omits server/auth details. Before installing or using it: 1) Confirm the canonical base URL and whether the API requires an API key or account — do not send sensitive company data until you know where it goes. 2) Verify the publisher (toolweb.in / api.mkkpro.com) and check their reputation and TLS certificates for the referenced domains. 3) Ask the author for the auth method, data retention/privacy policy, and sample non-production endpoints. 4) If you plan to send real audit evidence or PII, test against a sandbox environment and use least-privilege tokens. 5) Prefer skills that declare servers and required credentials explicitly or come from a verified publisher. Providing those details would raise confidence; their absence is why this is flagged as suspicious.
能力评估
Purpose & Capability
The name/description claim an enterprise SOX assessment platform and the SKILL.md + openapi.json model that API surface. However the package provides no server/auth configuration, no publisher/homepage, and no declared credentials — an API wrapper normally discloses the base URL and auth requirements. The lack of those details is an unexplained omission.
Instruction Scope
SKILL.md contains only API documentation, sample requests/responses, and endpoints. It does not instruct the agent to read local files, pull environment variables, or exfiltrate unrelated data. Scope of runtime instructions stays within the stated assessment functionality.
Install Mechanism
This is an instruction-only skill with no install spec and no code files; nothing will be written to disk during install. That reduces installation risk.
Credentials
No environment variables, credentials, or config paths are requested. Yet the documentation references external endpoints (api.mkkpro.com / portal.toolweb.in) and pricing, implying a hosted service that likely requires credentials or an API key. The absence of declared auth is a proportionality/information mismatch — the skill might require secrets at runtime but does not declare them.
Persistence & Privilege
The skill does not request always:true and uses default autonomy settings. It does not attempt to modify agent-wide configs or other skills. No persistence or elevated privileges are requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install sox-compliance - 安装完成后，直接呼叫该 Skill 的名称或使用
/sox-compliance触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of the SOX Compliance Checker.
- Launches a platform for assessing organizational compliance with Sarbanes-Oxley requirements across financial reporting and IT general control domains.
- Supports multi-tier (basic, standard, enterprise) assessments with detailed result breakdowns and remediation recommendations.
- Provides API endpoints for health checks and comprehensive SOX assessments.
- Offers usage examples and schema documentation for seamless integration.
- Multiple pricing tiers available, including a free plan.
元数据
常见问题
SOX Compliance 是什么？
Enterprise-grade Sarbanes-Oxley assessment platform that evaluates organizational compliance with SOX requirements across multiple control domains. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 134 次。
如何安装 SOX Compliance？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sox-compliance」即可一键安装，无需额外配置。
SOX Compliance 是免费的吗？
是的，SOX Compliance 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
SOX Compliance 支持哪些平台？
SOX Compliance 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 SOX Compliance？
由 ToolWeb（@krishnakumarmahadevan-cmd）开发并维护，当前版本 v1.0.0。
推荐 Skills