Audit Log Firewall

通过本地允许列表检查终端命令，识别删除、提权或对外连接等高危操作并触发暂停确认；同时将命令、用户、工作目录与哈希写入安全日志，便于事后人工审计与追溯。

热度 60.40

最近更新 2026-05-11 17:27:54

分类：安全依赖：代码执行 / 读写文件应用场景：工作流 / 自动化脚本

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add audit-log-firewall

Metadata

name: audit-log-firewall
description: Policy-based monitoring and command-line enforcement for high-risk agent operations. Intercepts sensitive commands and logs them for human auditing.

Security is a non-negotiable protocol for autonomous agents. This skill acts as a dynamic guardrail.

Every command is checked against a local allowlist (config/allowlist.json).

High Risk: commands like rm -rf, sudo, or direct curl to unknown external IPs.
Protocol: If a high-risk command is detected, the agent triggers a mandatory 'Pause and Ask' state.

All terminal activity is hashed and stored in .logs/SECURITY.json.

Fields: Timestamp, Command, User, Working Directory, and Hash.
Utility: Allows humans to reconstruct the agent's actions in case of a breach or error.

clawhub install audit-log-firewall