Search

PythonReactSEOPDF
OpenClaw

audit-log-firewall

Policy-based monitoring and command-line enforcement for high-risk agent operations. Intercepts sensitive commands and logs them for human auditing.

balkanblbn0 source installs☆ 0 Repository stars

Installation

Follow the repository instructions for this skill and your agent. Review the files and dependencies before adding it to your workflow.

SkillHub CLI

skillhub install balkanblbn/audit-log-firewall

Inspect the source and compatibility requirements, then follow its installation steps.

Give your agent the source link and ask it to inspect instructions and dependencies before explaining the installation steps.

View source ↗Guides

Skill instructions

Audit Log Firewall

Security is a non-negotiable protocol for autonomous agents. This skill acts as a dynamic guardrail.

Operational Modes

1. Interception Mode

Every command is checked against a local allowlist (config/allowlist.json).

  • High Risk: commands like rm -rf, sudo, or direct curl to unknown external IPs.
  • Protocol: If a high-risk command is detected, the agent triggers a mandatory 'Pause and Ask' state.
2. Forensic Logging

All terminal activity is hashed and stored in .logs/SECURITY.json.

  • Fields: Timestamp, Command, User, Working Directory, and Hash.
  • Utility: Allows humans to reconstruct the agent's actions in case of a breach or error.

Installation

clawhub install audit-log-firewall

Source information

Source
github
Repository
openclaw/skills
Path
skills/balkanblbn/audit-log-firewall
Version
—
Commit
82d83703b656159dfe78ab11990e67cc49c700ba
Classification source
rules
Status
active
Visibility
public

These signals come from indexed source analysis and may lag behind changes. Check the current source files.

Extracted content

SKILL.md
# Audit Log Firewall

Security is a non-negotiable protocol for autonomous agents. This skill acts as a dynamic guardrail.

## Operational Modes

### 1. Interception Mode
Every command is checked against a local allowlist (`config/allowlist.json`).
- **High Risk**: commands like `rm -rf`, `sudo`, or direct `curl` to unknown external IPs.
- **Protocol**: If a high-risk command is detected, the agent triggers a mandatory 'Pause and Ask' state.

### 2. Forensic Logging
All terminal activity is hashed and stored in `.logs/SECURITY.json`.
- **Fields**: Timestamp, Command, User, Working Directory, and Hash.
- **Utility**: Allows humans to reconstruct the agent's actions in case of a breach or error.

## Installation
```bash
clawhub install audit-log-firewall
```

Related skills

OpenClaw

13-Day Sprint Method

galizki

Productivity system based on Maya calendar with 13 natural tones for project management and personal development

OpenClaw

1password

daggerkun007

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.