firm-advanced-security-pack
⚠️ Contenu généré par IA — validation humaine requise avant utilisation.
Purpose
Deep security auditing for OpenClaw configurations — covers external secrets lifecycle,
channel path canonicalization, execution plan freeze validation, hook session routing,
$include directive guards, prototype pollution detection, safeBins profile enforcement,
and group policy default audit.
Tools (8)
| Tool | Description | Severity |
|---|
| INLINECODE1 | External Secrets lifecycle audit | CRITICAL |
| INLINECODE2 |
Channel path canonicalization | CRITICAL |
|
openclaw_exec_approval_freeze_check | Exec plan freeze validation | CRITICAL |
|
openclaw_hook_session_routing_check | Hook session routing audit | HIGH |
|
openclaw_config_include_check |
$include directive guards | HIGH |
|
openclaw_config_prototype_check | Prototype pollution detection | HIGH |
|
openclaw_safe_bins_profile_check | safeBins profile enforcement | HIGH |
|
openclaw_group_policy_default_check | Group policy default audit | HIGH |
Usage
CODEBLOCK0
Requirements
firm-advanced-security-pack
⚠️ AI生成内容 — 使用前需人工验证。
目的
对OpenClaw配置进行深度安全审计 — 涵盖外部密钥生命周期、
通道路径规范化、执行计划冻结验证、钩子会话路由、
$include指令防护、原型污染检测、safeBins配置文件强制实施
以及组策略默认审计。
工具（8个）
| 工具 | 描述 | 严重级别 |
|---|
| openclawsecretslifecyclecheck | 外部密钥生命周期审计 | 严重 |
| openclawchannelauthcanon_check |
通道路径规范化 | 严重 |
| openclaw
execapproval
freezecheck | 执行计划冻结验证 | 严重 |
| openclaw
hooksession
routingcheck | 钩子会话路由审计 | 高 |
| openclaw
configinclude_check | $include指令防护 | 高 |
| openclaw
configprototype_check | 原型污染检测 | 高 |
| openclaw
safebins
profilecheck | safeBins配置文件强制实施 | 高 |
| openclaw
grouppolicy
defaultcheck | 组策略默认审计 | 高 |
使用方法
yaml
skills:
- firm-advanced-security-pack
运行完整的高级安全审计：
openclaw
secretslifecycle
check configpath=/path/to/config.json
openclaw
configprototype
check configpath=/path/to/config.json
openclaw
safebins
profilecheck config_path=/path/to/config.json
要求
- - mcp-openclaw-extensions >= 3.0.0
