菜单
Advanced security audit pack covering secrets lifecycle, path canonicalization, exec plan freeze, hook routing, config includes, prototype pollution, safeBins profiles, and group policy defaults. 8 deep security tools.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/romainsantoli-web/setup-vs-agent-firm --skill firm-advanced-security-pack命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
Location strategy and site selection pack. Geo-economic analysis, real estate intelligence, site scoring, tax incentive optimization, and TCO simulation. 5 location tools.
Procurement and supplier management pack. Supplier sourcing, multi-criteria evaluation, TCO analysis, contract management, and supply chain risk monitoring. 5 procurement tools.
Market research and competitive intelligence pack. Competitive analysis, market sizing, financial benchmarking, web research, report generation, and competitive monitoring. 6 market research tools.
正在显示 SKILL.md
基于 SOC 职业分类
| name | firm-advanced-security-pack |
| version | 1.0.0 |
| description | Advanced security audit pack covering secrets lifecycle, path canonicalization, exec plan freeze, hook routing, config includes, prototype pollution, safeBins profiles, and group policy defaults. 8 deep security tools. |
| author | romainsantoli-web |
| license | MIT |
| metadata | {"openclaw":{"registry":"ClawHub","requires":["mcp-openclaw-extensions >= 3.0.0"]}} |
| tags | ["security","advanced","audit","prototype-pollution","exec-freeze"] |
⚠️ Contenu généré par IA — validation humaine requise avant utilisation.
Deep security auditing for OpenClaw configurations — covers external secrets lifecycle,
channel path canonicalization, execution plan freeze validation, hook session routing,
$include directive guards, prototype pollution detection, safeBins profile enforcement,
and group policy default audit.
| Tool | Description | Severity |
|---|---|---|
openclaw_secrets_lifecycle_check | External Secrets lifecycle audit | CRITICAL |
openclaw_channel_auth_canon_check | Channel path canonicalization | CRITICAL |
openclaw_exec_approval_freeze_check | Exec plan freeze validation | CRITICAL |
openclaw_hook_session_routing_check | Hook session routing audit | HIGH |
openclaw_config_include_check | $include directive guards | HIGH |
openclaw_config_prototype_check | Prototype pollution detection | HIGH |
openclaw_safe_bins_profile_check | safeBins profile enforcement | HIGH |
openclaw_group_policy_default_check | Group policy default audit | HIGH |
skills:
- firm-advanced-security-pack
# Run full advanced security audit:
openclaw_secrets_lifecycle_check config_path=/path/to/config.json
openclaw_config_prototype_check config_path=/path/to/config.json
openclaw_safe_bins_profile_check config_path=/path/to/config.json
mcp-openclaw-extensions >= 3.0.0