Baseline Kit

Generate profile-based OpenClaw configuration JSON and audit an existing config before rollout.

When to use

• - You need a starting profile for development, team, enterprise, or airgapped.
• You want an offline audit for gateway.bind, auth rate limits, allowed skill sources, audit logging, backups, or secret-like values.
• You need a reviewable JSON artifact without contacting external services.

Commands

CODEBLOCK0

Profiles

Audit checks

• - NET_EXPOSURE: whether gateway.bind is loopback-only
• INLINECODE11: whether auth rate limiting is configured completely
• INLINECODE12: whether allowed skill sources are too broad
• INLINECODE13: whether audit logging is enabled
• INLINECODE14: whether backup settings are present
• INLINECODE15: whether the config tree contains plaintext secret-like values

Output

• - Each finding includes a severity, evidence path, recommendation, and compliance tag set.
• Compliance tags currently map to SOC2, ISO27001, and NIST CSF.

Boundaries

• - This tool audits JSON structure only. It does not enforce runtime policy.
• Generated profiles are safer defaults, not a complete configuration management system.