Firm Config Migration Pack

面向 OpenClaw 配置迁移的安全审计包，提供 5 个检查工具：shell 环境变量净化（LD_*/DYLD_*）、插件 SHA-256 完整性校验、令牌隔离检查、OpenTelemetry PII 脱敏校验与 RPC 限流配置检查，按检查项给出 HIGH/MEDIUM 严重级别。

romainsantoli-web

热度 63.89

最近更新 2026-05-11 17:28:08

分类：安全依赖：MCP 服务应用场景：DevOps / 工作流

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add firm-config-migration-pack

Metadata

name: firm-config-migration-pack
version: 1.0.0
description: Configuration migration and integrity audit pack. Shell env sanitization, plugin integrity, token separation, OTEL redaction, and RPC rate limiting. 5 migration tools.
author: romainsantoli-web
license: MIT
metadata: {"openclaw":{"registry":"ClawHub","requires":["mcp-openclaw-extensions >= 3.0.0"]}}
tags: ["config","migration","integrity","otel","security"]

firm-config-migration-pack

⚠️ Contenu généré par IA — validation humaine requise avant utilisation.

Purpose

Validates configuration migration safety: shell environment sanitization (LD_PRELOAD, DYLD_*), plugin integrity via SHA-256 manifest verification, token separation enforcement, OpenTelemetry PII redaction, and RPC rate limiting.

Tools (5)

Tool	Description	Severity
`openclaw_shell_env_check`	Shell environment sanitization (LD_/DYLD_)	HIGH
`openclaw_plugin_integrity_check`	Plugin SHA-256 manifest drift detection	HIGH
`openclaw_token_separation_check`	Token separation enforcement	HIGH
`openclaw_otel_redaction_check`	OTEL PII redaction validation	MEDIUM
`openclaw_rpc_rate_limit_check`	RPC rate limiting configuration	MEDIUM

Usage

skills:
  - firm-config-migration-pack

# Audit configuration before migration:
openclaw_shell_env_check config_path=/path/to/config.json
openclaw_plugin_integrity_check config_path=/path/to/config.json

Requirements

mcp-openclaw-extensions >= 3.0.0