firm-auth-compliance-pack
⚠️ Contenu généré par IA — validation humaine requise avant utilisation.
Purpose
Comprehensive authentication and compliance auditing: OAuth 2.1 / OIDC Discovery
compliance (PKCE, RFC 9728, RFC 8707), token scope enforcement, tool deprecation
lifecycle, circuit breaker patterns, GDPR data residency, W3C DID identity,
multi-model routing, and resource links validation.
Tools (8)
| Tool | Description | Severity |
|---|
| INLINECODE0 | OAuth 2.1 / OIDC Discovery compliance | HIGH |
| INLINECODE1 |
Token scope enforcement | HIGH |
|
openclaw_tool_deprecation_audit | Tool deprecation lifecycle audit | MEDIUM |
|
openclaw_circuit_breaker_audit | Circuit breaker pattern validation | MEDIUM |
|
openclaw_gdpr_residency_audit | GDPR data residency compliance | MEDIUM |
|
openclaw_agent_identity_audit | W3C DID agent identity validation | MEDIUM |
|
openclaw_model_routing_audit | Multi-model routing configuration | MEDIUM |
|
openclaw_resource_links_audit | Resource links validation | MEDIUM |
Usage
CODEBLOCK0
Requirements
firm-auth-compliance-pack
⚠️ AI生成内容——使用前需人工验证。
目的
全面的身份验证与合规审计：OAuth 2.1 / OIDC Discovery 合规性（PKCE、RFC 9728、RFC 8707）、令牌作用域强制执行、工具弃用生命周期、断路器模式、GDPR 数据驻留、W3C DID 身份、多模型路由以及资源链接验证。
工具（8个）
| 工具 | 描述 | 严重级别 |
|---|
| openclawoauthoidcaudit | OAuth 2.1 / OIDC Discovery 合规性 | 高 |
| openclawtokenscopecheck |
令牌作用域强制执行 | 高 |
| openclaw
tooldeprecation_audit | 工具弃用生命周期审计 | 中 |
| openclaw
circuitbreaker_audit | 断路器模式验证 | 中 |
| openclaw
gdprresidency_audit | GDPR 数据驻留合规性 | 中 |
| openclaw
agentidentity_audit | W3C DID 代理身份验证 | 中 |
| openclaw
modelrouting_audit | 多模型路由配置 | 中 |
| openclaw
resourcelinks_audit | 资源链接验证 | 中 |
使用方法
yaml
skills:
- firm-auth-compliance-pack
运行合规审计：
openclaw
oauthoidc
audit configpath=/path/to/config.json
openclaw
gdprresidency
audit configpath=/path/to/config.json
openclaw
agentidentity
audit configpath=/path/to/config.json
要求
- - mcp-openclaw-extensions >= 3.0.0
