← 返回 Skills 市场
121
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install toolweb-gke-hardening
功能描述
Generates CIS Benchmark-aligned security hardening configurations for Google Kubernetes Engine clusters.
安全使用建议
This skill appears to be a front-end for a hosted service that generates GKE hardening YAMLs. Before installing or using it, consider: (1) The skill will send your hardening options and session/user identifiers to a third party (toolweb.in / api.mkkpro.com). Don't send real cluster names, credentials, secrets, or anything uniquely identifying unless you trust the service. (2) The skill does not declare required API credentials or a security scheme — ask the publisher whether an API key or authentication is required and how data is protected in transit and at rest. (3) Review the external API's docs, privacy policy, and TLS certificate; verify pricing and rate limits. (4) If you need local-only generation for sensitive environments, prefer a skill that runs entirely locally or provides explicit offline operation. (5) If you proceed, test with non-sensitive/dummy data first and request written details about audit logging, retention, and how user/session IDs are used.
功能分析
Type: OpenClaw Skill
Name: toolweb-gke-hardening
Version: 1.0.0
The skill is a standard API wrapper for a GKE security hardening tool that generates CIS Benchmark-aligned YAML configurations. Analysis of SKILL.md and openapi.json reveals no evidence of malicious intent, data exfiltration, or prompt injection; the tool functions by sending user-defined parameters to a remote backend (api.mkkpro.com) for configuration generation.
能力评估
Purpose & Capability
Name, description, SKILL.md examples and openapi.json are consistent: the skill is a generator for GKE CIS-based hardening configs and exposes endpoints to generate configs and list options. There are no unrelated binaries, env vars, or config paths requested.
Instruction Scope
SKILL.md is narrowly scoped to accepting hardeningOptions/sessionId/userId/timestamp and returning YAML config files. However, the doc and references point to an external hosted API (api.mkkpro.com / toolweb.in) as the implementation. That implies the agent will send request data (including session/user identifiers and the chosen hardening options) to a third party — this is reasonable for a hosted service but is a behavior users should be aware of.
Install Mechanism
Instruction-only skill with no install spec and no code files to execute locally; lowest install risk. The openapi.json is present for API schema purposes only.
Credentials
The documentation and pricing indicate a hosted API, but the skill does not declare any required credentials, API keys, or security schemes. If the service requires authentication or will receive potentially sensitive GKE configuration details, not declaring required credentials is an inconsistency and a privacy/security concern. Sending cluster policy choices or identifiers to a remote service without explicit auth and data-handling guidance could expose sensitive information.
Persistence & Privilege
Skill does not request always:true, does not modify other skills, and has no elevated persistence or system privileges. Autonomous invocation (model invocation enabled) is the platform default and not by itself an issue.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install toolweb-gke-hardening - 安装完成后，直接呼叫该 Skill 的名称或使用
/toolweb-gke-hardening触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of the GKE Security Hardening Tool.
- Automates generation of CIS Benchmark-aligned security configurations for Google Kubernetes Engine clusters.
- Provides endpoints to generate hardened configuration files, retrieve available hardening options, and check service health.
- Supports session and user tracking for audit and compliance.
- Offers multiple pricing tiers, including a free plan.
元数据
常见问题
GKE Hardening 是什么？
Generates CIS Benchmark-aligned security hardening configurations for Google Kubernetes Engine clusters. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 121 次。
如何安装 GKE Hardening？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install toolweb-gke-hardening」即可一键安装，无需额外配置。
GKE Hardening 是免费的吗？
是的，GKE Hardening 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
GKE Hardening 支持哪些平台？
GKE Hardening 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 GKE Hardening？
由 ToolWeb（@krishnakumarmahadevan-cmd）开发并维护，当前版本 v1.0.0。
推荐 Skills