Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Patch-6: documentation refresh; guarded privileged exec + live assessment hygiene; root session guard docstring.
What This Skill Does
Enforces least-privilege execution, approval-gated privilege escalation, and session timeout controls within OpenClaw workflows. Monitors listening ports and outbound connections against approved baselines. Generates compliance reports mapped to ISO 27001 and NIST controls with concrete mitigations.
Combines runtime privilege governance, network monitoring, and compliance benchmarking in one workflow instead of managing separate tools for each concern.
When to use it
- Auditing which ports are exposed before deploying a service
- Generating a privilege escalation audit trail for a security review
- Flagging outbound connections to unapproved destinations during a task
- Running a compliance gap report against ISO 27001 controls
- Enforcing command allow/deny policy in a sensitive automation workflow
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Run a preflight security check on my current environment and report any violations
- 1Runs preflight_check.py to assess current privilege state and session context
- 2Invokes port_monitor.py to compare listening ports against the approved baseline
- 3Runs egress_monitor.py to identify outbound connections outside the allowlist
- 4Maps findings to ISO 27001 and NIST controls via compliance-controls-map.json
- 5Calls notify_on_violation.py and outputs a report with check_id, status, risk, and mitigations
Compliance report listing each violation with affected check_id, risk level, evidence, and specific remediation steps