← 返回 Skills 市场
101
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install toolweb-azure-aks-hardening
功能描述
Generates CIS v1.8.0 compliant Azure Kubernetes Service (AKS) configurations for security hardening.
安全使用建议
This skill appears to describe a third‑party API for generating AKS hardening configs, but the documentation is vague about which base URL to call, how to authenticate, and how data is handled. Before installing or using it: (1) verify the service hostname and TLS (use the documented https endpoints), (2) ask the provider whether an API key or account is required and never hard-code sensitive keys into the agent, (3) avoid sending real cluster credentials or secrets — test with non-sensitive data first, (4) review the provider's privacy/retention policy to ensure configs you send aren't stored indefinitely, (5) prefer an explicit requires.env (API_KEY) or instructions that make authentication and billing transparent, and (6) independently review any generated configuration before applying to production. These steps will reduce the risk of accidental data exposure or unexpected charges.
功能分析
Type: OpenClaw Skill
Name: toolweb-azure-aks-hardening
Version: 1.0.0
The skill bundle provides documentation and an OpenAPI specification for an external API (api.mkkpro.com) designed to generate CIS-compliant Azure Kubernetes Service (AKS) hardening configurations. The files (SKILL.md, openapi.json) contain no executable code, suspicious prompt instructions, or evidence of data exfiltration or malicious intent.
能力评估
Purpose & Capability
The name/description and the included OpenAPI spec align: this is an API that generates CIS v1.8.0 AKS hardening configuration. However, the skill documents a paid external service (toolweb / api.mkkpro.com) yet declares no required credentials or env vars; that mismatch is unexpected for a hosted API offering paid tiers.
Instruction Scope
SKILL.md describes POST /api/aks/generate and sample payloads/responses but does not provide an explicit server/base URL in the OpenAPI spec nor clear runtime instructions about how the agent should call the service (authentication headers, rate limits, which base host to use). The doc references external hosts (api.mkkpro.com and api.mkkpro.com:8149) and pricing, which implies network calls and possibly API keys — yet no guidance on handling sensitive inputs (e.g., cluster identifiers, secrets) or whether sensitive data is retained by the service.
Install Mechanism
This is an instruction-only skill with no install spec and no code files; nothing is written to disk and there is no package installation step — lower installation risk.
Credentials
The skill requests no environment variables or credentials, but documents a paid external API and an external Kong route. In practice a hosted API with paid tiers commonly requires API keys or tokens; the absence of declared credentials is an inconsistency. Also, the docs do not warn users about sending potentially sensitive configuration data to a third-party service or how long that data is retained.
Persistence & Privilege
always is false and there are no config-path or system-level operations. The skill does allow normal autonomous invocation (disable-model-invocation is false), which is platform-default; combined with its network calls this increases blast radius slightly but is expected for an API-style skill.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install toolweb-azure-aks-hardening - 安装完成后,直接呼叫该 Skill 的名称或使用
/toolweb-azure-aks-hardening触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of the CIS Azure AKS Hardening Tool API.
- Automates generation of CIS v1.8.0 compliant Azure Kubernetes Service (AKS) configurations.
- Supports flexible hardening options for apiServer, kubelet, and networking categories.
- Provides compliance score, warnings, and additional security recommendations in responses.
- Offers dedicated endpoints for configuration generation (/api/aks/generate) and health checks (/).
- Tiered pricing plans available for varying usage needs.
元数据
常见问题
Azure AKS Hardening 是什么?
Generates CIS v1.8.0 compliant Azure Kubernetes Service (AKS) configurations for security hardening. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 101 次。
如何安装 Azure AKS Hardening?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install toolweb-azure-aks-hardening」即可一键安装,无需额外配置。
Azure AKS Hardening 是免费的吗?
是的,Azure AKS Hardening 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Azure AKS Hardening 支持哪些平台?
Azure AKS Hardening 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Azure AKS Hardening?
由 ToolWeb(@krishnakumarmahadevan-cmd)开发并维护,当前版本 v1.0.0。
推荐 Skills