Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Apply hardening patch (exact command policy rules, safer privileged execution, stricter notifier validation, runtime-hook hardening/macOS compatibility) and improve non-technical documentation.
What This Skill Does
Enforces privilege governance and hardening controls within OpenClaw sessions. Manages least-privilege execution, approval-gated privileged commands, idle timeout expiry, and network port and egress monitoring. Benchmarks the local environment against ISO 27001 and NIST controls and reports violations with concrete mitigations.
Combines privilege escalation controls, network exposure monitoring, and compliance benchmarking in one workflow rather than coordinating separate tools for each concern.
When to use it
- Auditing open listening ports before a production deployment
- Running a privileged command with explicit approval gating and auto-expiry
- Checking outbound connections against a local egress allowlist
- Generating a compliance gap report mapped to ISO 27001 and NIST controls
- Enforcing session scoping when processing content from untrusted sources
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Audit my local environment for privilege and network exposure issues
- 1Run preflight_check.py to verify policy files and session configuration
- 2Scan listening ports with port_monitor.py and compare against the approved baseline
- 3Flag any ports not in the approved list, noting bind address, process, and risk reason
- 4Run egress_monitor.py to identify outbound destinations outside the allowlist
- 5Generate a compliance dashboard with check IDs, statuses, risks, and mitigations via compliance_dashboard.py
Report listing unapproved listening ports and egress destinations with risk levels, plus a compliance summary mapping each finding to the relevant ISO 27001 and NIST controls and recommended remediations