菜单
Gateway authentication hardening and credentials audit pack. Validates device auth, Baileys credentials, webhook HMAC signatures, log configuration, and workspace integrity. 5 specialized security tools.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Legal status analysis and corporate structuring pack. Legal form comparison, tax simulation, social protection analysis, governance structuring, and compliance checklist. 5 legal status tools.
Location strategy and site selection pack. Geo-economic analysis, real estate intelligence, site scoring, tax incentive optimization, and TCO simulation. 5 location tools.
Procurement and supplier management pack. Supplier sourcing, multi-criteria evaluation, TCO analysis, contract management, and supply chain risk monitoring. 5 procurement tools.
Market research and competitive intelligence pack. Competitive analysis, market sizing, financial benchmarking, web research, report generation, and competitive monitoring. 6 market research tools.
Advanced security audit pack covering secrets lifecycle, path canonicalization, exec plan freeze, hook routing, config includes, prototype pollution, safeBins profiles, and group policy defaults. 8 deep security tools.
Multi-agent task orchestration pack. DAG-based parallel task execution and team status monitoring. 2 orchestration tools.
| name | firm-gateway-hardening-pack |
| version | 1.0.0 |
| description | Gateway authentication hardening and credentials audit pack. Validates device auth, Baileys credentials, webhook HMAC signatures, log configuration, and workspace integrity. 5 specialized security tools. |
| author | romainsantoli-web |
| license | MIT |
| metadata | {"openclaw":{"registry":"ClawHub","requires":["mcp-openclaw-extensions >= 3.0.0"]}} |
| tags | ["security","gateway","hardening","audit","credentials"] |
⚠️ Contenu généré par IA — validation humaine requise avant utilisation.
Hardens the OpenClaw Gateway by auditing authentication configuration, credentials storage, webhook signatures, logging, and workspace file integrity.
| Tool | Description | Severity |
|---|---|---|
openclaw_gateway_auth_check | Validate Gateway device auth is enabled | CRITICAL |
openclaw_credentials_check | Audit Baileys credentials storage security | HIGH |
openclaw_webhook_sig_check | Verify HMAC signature on webhooks | HIGH |
openclaw_log_config_check | Check log configuration (no sensitive data) | MEDIUM |
openclaw_workspace_integrity_check | Verify workspace file integrity | MEDIUM |
skills:
- firm-gateway-hardening-pack
# Run full gateway hardening audit:
openclaw_gateway_auth_check config_path=/path/to/config.json
openclaw_credentials_check config_path=/path/to/config.json
openclaw_webhook_sig_check config_path=/path/to/config.json
mcp-openclaw-extensions >= 3.0.0