Firm Gateway Hardening Pack

核心功能：通过5个不同风险等级的工具，分别核查OpenClaw网关的设备认证、Baileys凭证存储、Webhook签名、日志配置及工作区完整性。典型场景：用于对OpenClaw网关开展全面安全加固审计，排查隐患。使用时指定配置文件路径，输出检查结果，需依赖指定版本扩展。

romainsantoli-web

热度 68.16

最近更新 2026-05-11 17:28:01

分类：安全依赖：MCP 服务应用场景：报告撰写

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add firm-gateway-hardening-pack

Metadata

name: firm-gateway-hardening-pack
version: 1.0.0
description: Gateway authentication hardening and credentials audit pack. Validates device auth, Baileys credentials, webhook HMAC signatures, log configuration, and workspace integrity. 5 specialized security tools.
author: romainsantoli-web
license: MIT
metadata: {"openclaw":{"registry":"ClawHub","requires":["mcp-openclaw-extensions >= 3.0.0"]}}
tags: ["security","gateway","hardening","audit","credentials"]

firm-gateway-hardening-pack

⚠️ Contenu généré par IA — validation humaine requise avant utilisation.

Purpose

Hardens the OpenClaw Gateway by auditing authentication configuration, credentials storage, webhook signatures, logging, and workspace file integrity.

Tools (5)

Tool	Description	Severity
`openclaw_gateway_auth_check`	Validate Gateway device auth is enabled	CRITICAL
`openclaw_credentials_check`	Audit Baileys credentials storage security	HIGH
`openclaw_webhook_sig_check`	Verify HMAC signature on webhooks	HIGH
`openclaw_log_config_check`	Check log configuration (no sensitive data)	MEDIUM
`openclaw_workspace_integrity_check`	Verify workspace file integrity	MEDIUM

Usage

skills:
  - firm-gateway-hardening-pack

# Run full gateway hardening audit:
openclaw_gateway_auth_check config_path=/path/to/config.json
openclaw_credentials_check config_path=/path/to/config.json
openclaw_webhook_sig_check config_path=/path/to/config.json

Requirements

mcp-openclaw-extensions >= 3.0.0