OpenClaw

cyber-security-engineer

Security engineering workflow for OpenClaw privilege governance and hardening. Use for least-privilege execution, approval-first privileged actions, idle timeout controls, port + egress monitoring, and ISO 27001/NIST-aligned compliance reporting with mitigations.

fletcherfrimpong0 来源安装数☆ 0 仓库 Stars

查看来源 ↗安装与使用 SKILL.md ↗

安装与使用

请根据来源仓库和你的 AI 工具说明安装此技能。先阅读技能文件和依赖要求，再添加到工作流。

SkillHub CLI

skillhub install fletcherfrimpong/fletcher-cyber-security-engineer

打开来源仓库，查看说明和兼容环境后，按来源提供的命令或步骤安装。

将来源链接提供给你的 Agent，让它先读取说明、核对依赖，并向你说明将执行的安装步骤。

查看来源 ↗使用指南

技能说明

Cyber Security Engineer

Implement these controls in every security-sensitive task:

Keep default execution in normal (non-root) mode.
Request explicit user approval before any elevated command.
Scope elevation to the minimum command set required for the active task.
Drop elevated state immediately after the privileged command completes.
Expire elevated state after 30 idle minutes and require re-approval.
Monitor listening network ports and flag insecure or unapproved exposure.
Monitor outbound connections and flag destinations not in the egress allowlist.
If no approved baseline exists, generate one and require user review/pruning.
Benchmark controls against ISO 27001 and NIST and report violations with mitigations.

Non-Goals (Web Browsing)

Do not use web browsing / web search as part of this skill. Keep assessments and recommendations based on local host/OpenClaw state and the bundled references in this skill.

Files To Use

references/least-privilege-policy.md
references/port-monitoring-policy.md
references/compliance-controls-map.json
references/approved_ports.template.json
references/command-policy.template.json
references/prompt-policy.template.json
references/egress-allowlist.template.json
scripts/preflight_check.py
scripts/root_session_guard.py
scripts/audit_logger.py
scripts/command_policy.py
scripts/prompt_policy.py
scripts/guarded_privileged_exec.py
scripts/install-openclaw-runtime-hook.sh
scripts/port_monitor.py
scripts/generate_approved_ports.py
scripts/egress_monitor.py
scripts/notify_on_violation.py
scripts/compliance_dashboard.py
scripts/live_assessment.py

Behavior

Never keep root/elevated access open between unrelated tasks.
Never execute root commands without an explicit approval step in the current flow.
Enforce command allow/deny policy when configured.
Require confirmation when untrusted content sources are detected...

来源信息

Source: github
Repository: openclaw/skills
Path: skills/fletcherfrimpong/fletcher-cyber-security-engineer
Version: —
Commit: 8c0515a8d1b7c05e832d3f7507c56fbfca03f447
分类来源: rules
状态: active
可见性: public

这些信息来自收录时的来源分析，可能滞后；使用前请核对最新来源文件。

来源内容

SKILL.md

# Cyber Security Engineer

Implement these controls in every security-sensitive task:

1. Keep default execution in normal (non-root) mode.
2. Request explicit user approval before any elevated command.
3. Scope elevation to the minimum command set required for the active task.
4. Drop elevated state immediately after the privileged command completes.
5. Expire elevated state after 30 idle minutes and require re-approval.
6. Monitor listening network ports and flag insecure or unapproved exposure.
7. Monitor outbound connections and flag destinations not in the egress allowlist.
8. If no approved baseline exists, generate one and require user review/pruning.
9. Benchmark controls against ISO 27001 and NIST and report violations with mitigations.

## Non-Goals (Web Browsing)

- Do not use web browsing / web search as part of this skill. Keep assessments and recommendations based on local host/OpenClaw state and the bundled references in this skill.

## Files To Use

- `references/least-privilege-policy.md`
- `references/port-monitoring-policy.md`
- `references/compliance-controls-map.json`
- `references/approved_ports.template.json`
- `references/command-policy.template.json`
- `references/prompt-policy.template.json`
- `references/egress-allowlist.template.json`
- `scripts/preflight_check.py`
- `scripts/root_session_guard.py`
- `scripts/audit_logger.py`
- `scripts/command_policy.py`
- `scripts/prompt_policy.py`
- `scripts/guarded_privileged_exec.py`
- `scripts/install-openclaw-runtime-hook.sh`
- `scripts/port_monitor.py`
- `scripts/generate_approved_ports.py`
- `scripts/egress_monitor.py`
- `scripts/notify_on_violation.py`
- `scripts/compliance_dashboard.py`
- `scripts/live_assessment.py`

## Behavior

- Never keep root/elevated access open between unrelated tasks.
- Never execute root commands without an explicit approval step in the current flow.
- Enforce command allow/deny policy when configured.
- Require confirmation when untrusted content sources are detected...

搜索