菜单
Runtime environment and configuration audit pack. Validates Node.js version, secrets workflow, HTTP headers, allowed commands, trusted proxy, disk budget, and DM allowlist. 7 runtime security tools.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Legal status analysis and corporate structuring pack. Legal form comparison, tax simulation, social protection analysis, governance structuring, and compliance checklist. 5 legal status tools.
Location strategy and site selection pack. Geo-economic analysis, real estate intelligence, site scoring, tax incentive optimization, and TCO simulation. 5 location tools.
Procurement and supplier management pack. Supplier sourcing, multi-criteria evaluation, TCO analysis, contract management, and supply chain risk monitoring. 5 procurement tools.
Market research and competitive intelligence pack. Competitive analysis, market sizing, financial benchmarking, web research, report generation, and competitive monitoring. 6 market research tools.
Advanced security audit pack covering secrets lifecycle, path canonicalization, exec plan freeze, hook routing, config includes, prototype pollution, safeBins profiles, and group policy defaults. 8 deep security tools.
Multi-agent task orchestration pack. DAG-based parallel task execution and team status monitoring. 2 orchestration tools.
| name | firm-runtime-audit-pack |
| version | 1.0.0 |
| description | Runtime environment and configuration audit pack. Validates Node.js version, secrets workflow, HTTP headers, allowed commands, trusted proxy, disk budget, and DM allowlist. 7 runtime security tools. |
| author | romainsantoli-web |
| license | MIT |
| metadata | {"openclaw":{"registry":"ClawHub","requires":["mcp-openclaw-extensions >= 3.0.0"]}} |
| tags | ["runtime","audit","security","nodejs","configuration"] |
⚠️ Contenu généré par IA — validation humaine requise avant utilisation.
Audits the runtime environment of OpenClaw deployments: Node.js version compliance, secrets handling, HTTP security headers, command allowlists, proxy configuration, disk budget, and direct message policies.
| Tool | Description | Severity |
|---|---|---|
openclaw_node_version_check | Verify Node.js runtime version | CRITICAL |
openclaw_secrets_workflow_check | Audit secrets handling in workflows | CRITICAL |
openclaw_http_headers_check | Check HTTP security headers (HSTS, CSP) | HIGH |
openclaw_nodes_commands_check | Validate nodes.allowCommands config | HIGH |
openclaw_trusted_proxy_check | Verify trusted proxy configuration | HIGH |
openclaw_session_disk_budget_check | Check session disk budget limits | MEDIUM |
openclaw_dm_allowlist_check | Audit DM channel allowlist policy | MEDIUM |
skills:
- firm-runtime-audit-pack
# Run full runtime audit:
openclaw_node_version_check config_path=/path/to/config.json
openclaw_secrets_workflow_check config_path=/path/to/config.json
openclaw_http_headers_check config_path=/path/to/config.json
mcp-openclaw-extensions >= 3.0.0