firm-gateway-hardening-pack
⚠️ Contenu généré par IA — validation humaine requise avant utilisation.
Purpose
Hardens the OpenClaw Gateway by auditing authentication configuration,
credentials storage, webhook signatures, logging, and workspace file integrity.
Tools (5)
| Tool | Description | Severity |
|---|
| INLINECODE0 | Validate Gateway device auth is enabled | CRITICAL |
| INLINECODE1 |
Audit Baileys credentials storage security | HIGH |
|
openclaw_webhook_sig_check | Verify HMAC signature on webhooks | HIGH |
|
openclaw_log_config_check | Check log configuration (no sensitive data) | MEDIUM |
|
openclaw_workspace_integrity_check | Verify workspace file integrity | MEDIUM |
Usage
CODEBLOCK0
Requirements
技能名称: firm-gateway-hardening-pack
详细描述:
firm-gateway-hardening-pack
⚠️ AI生成内容——使用前需人工验证。
目的
通过审计身份验证配置、凭据存储、Webhook签名、日志记录和工作区文件完整性，强化OpenClaw网关。
工具（5个）
| 工具 | 描述 | 严重级别 |
|---|
| openclawgatewayauthcheck | 验证网关设备认证是否已启用 | 严重 |
| openclawcredentials_check |
审计Baileys凭据存储安全性 | 高 |
| openclaw
webhooksig_check | 验证Webhook上的HMAC签名 | 高 |
| openclaw
logconfig_check | 检查日志配置（无敏感数据） | 中 |
| openclaw
workspaceintegrity_check | 验证工作区文件完整性 | 中 |
使用方法
yaml
skills:
- firm-gateway-hardening-pack
运行完整的网关强化审计：
openclaw
gatewayauth
check configpath=/path/to/config.json
openclaw
credentialscheck config_path=/path/to/config.json
openclaw
webhooksig
check configpath=/path/to/config.json
要求
- - mcp-openclaw-extensions >= 3.0.0
