Firm Gateway Hardening Pack

提供 5 个 OpenClaw 网关安全审计工具，覆盖设备认证启用、Baileys 凭据存储、Webhook HMAC 签名、日志敏感数据与工作区文件完整性检查；依赖 mcp-openclaw-extensions 3.0.0+，未说明检测规则与自动修复能力。

romainsantoli-web

热度 68.16

最近更新 2026-05-11 17:28:01

分类：安全依赖：MCP 服务 / 读写文件应用场景：DevOps

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add firm-gateway-hardening-pack

Metadata

name: firm-gateway-hardening-pack
version: 1.0.0
description: Gateway authentication hardening and credentials audit pack. Validates device auth, Baileys credentials, webhook HMAC signatures, log configuration, and workspace integrity. 5 specialized security tools.
author: romainsantoli-web
license: MIT
metadata: {"openclaw":{"registry":"ClawHub","requires":["mcp-openclaw-extensions >= 3.0.0"]}}
tags: ["security","gateway","hardening","audit","credentials"]

firm-gateway-hardening-pack

⚠️ Contenu généré par IA — validation humaine requise avant utilisation.

Purpose

Hardens the OpenClaw Gateway by auditing authentication configuration, credentials storage, webhook signatures, logging, and workspace file integrity.

Tools (5)

Tool	Description	Severity
`openclaw_gateway_auth_check`	Validate Gateway device auth is enabled	CRITICAL
`openclaw_credentials_check`	Audit Baileys credentials storage security	HIGH
`openclaw_webhook_sig_check`	Verify HMAC signature on webhooks	HIGH
`openclaw_log_config_check`	Check log configuration (no sensitive data)	MEDIUM
`openclaw_workspace_integrity_check`	Verify workspace file integrity	MEDIUM

Usage

skills:
  - firm-gateway-hardening-pack

# Run full gateway hardening audit:
openclaw_gateway_auth_check config_path=/path/to/config.json
openclaw_credentials_check config_path=/path/to/config.json
openclaw_webhook_sig_check config_path=/path/to/config.json

Requirements

mcp-openclaw-extensions >= 3.0.0