Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Tencent SkillHub · Other
Cyber Security Engineer
Security engineering workflow for OpenClaw privilege governance and hardening. Use for least-privilege execution, approval-first privileged actions, idle tim...
skill openclawclawhub Free
Security engineering workflow for OpenClaw privilege governance and hardening. Use for least-privilege execution, approval-first privileged actions, idle tim...
⬇ 0 downloads ★ 0 stars Unverified but indexed
Install for OpenClaw
Quick setup
- Download the package from Yavira.
- Extract the archive and review SKILL.md first.
- Import or place the package into your OpenClaw setup.
Package facts
- Download mode
- Yavira redirect
- Package format
- ZIP package
- Source platform
- Tencent SkillHub
- What's included
- SKILL.md, agents/openai.yaml, assessments/compliance-dashboard.html, assessments/compliance-summary.json, assessments/openclaw-assessment.json, references/approved_ports.template.json
Validation
- Use the Yavira download entry.
- Review SKILL.md after the package is downloaded.
- Confirm the extracted package contains the expected setup assets.
Install with your agent
Agent handoff
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
- Download the package from Yavira.
- Extract it into a folder your agent can access.
- Paste one of the prompts below and point your agent at the extracted folder.
New install
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
Upgrade existing
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Trust & source
Release facts
- Source
- Tencent SkillHub
- Verification
- Indexed source record
- Version
- 0.1.5
Provenance
- Publisher
- FletcherFrimpong
- Source page
- View original listing
- Canonical URL
- Open canonical page
Documentation
Requirements
Env vars (optional, but documented): OPENCLAW_REQUIRE_POLICY_FILES OPENCLAW_REQUIRE_SESSION_ID OPENCLAW_TASK_SESSION_ID OPENCLAW_APPROVAL_TOKEN OPENCLAW_UNTRUSTED_SOURCE OPENCLAW_VIOLATION_NOTIFY_CMD OPENCLAW_VIOLATION_NOTIFY_ALLOWLIST Tools: python3 and one of lsof, ss, or netstat for port/egress checks. Policy files (admin reviewed): ~/.openclaw/security/approved_ports.json ~/.openclaw/security/command-policy.json ~/.openclaw/security/egress_allowlist.json ~/.openclaw/security/prompt-policy.json Implement these controls in every security-sensitive task: Keep default execution in normal (non-root) mode. Request explicit user approval before any elevated command. Scope elevation to the minimum command set required for the active task. Drop elevated state immediately after the privileged command completes. Expire elevated state after 30 idle minutes and require re-approval. Monitor listening network ports and flag insecure or unapproved exposure. Monitor outbound connections and flag destinations not in the egress allowlist. If no approved baseline exists, generate one with python3 scripts/generate_approved_ports.py, then review and prune. Benchmark controls against ISO 27001 and NIST and report violations with mitigations.
Non-Goals (Web Browsing)
Do not use web browsing / web search as part of this skill. Keep assessments and recommendations based on local host/OpenClaw state and the bundled references in this skill.
Files To Use
references/least-privilege-policy.md references/port-monitoring-policy.md references/compliance-controls-map.json references/approved_ports.template.json references/command-policy.template.json references/prompt-policy.template.json references/egress-allowlist.template.json scripts/preflight_check.py scripts/root_session_guard.py scripts/audit_logger.py scripts/command_policy.py scripts/prompt_policy.py scripts/guarded_privileged_exec.py scripts/install-openclaw-runtime-hook.sh scripts/port_monitor.py scripts/generate_approved_ports.py scripts/egress_monitor.py scripts/notify_on_violation.py scripts/compliance_dashboard.py scripts/live_assessment.py
Behavior
Never keep root/elevated access open between unrelated tasks. Never execute root commands without an explicit approval step in the current flow. Enforce command allow/deny policy when configured. Require confirmation when untrusted content sources are detected (OPENCLAW_UNTRUSTED_SOURCE=1 + prompt policy). Enforce task session id scoping when configured (OPENCLAW_REQUIRE_SESSION_ID=1). If timeout is exceeded, force session expiration and approval renewal. Log privileged actions to ~/.openclaw/security/privileged-audit.jsonl (best-effort). Flag listening ports not present in the approved baseline and recommend secure alternatives for insecure ports. Flag outbound destinations not present in the egress allowlist.
Output Contract
When reporting status, include: The specific check_id(s) affected, status, risk, and concise evidence. Concrete mitigations (what to change, where) and any owners/due dates if present. For network findings: port, bind address, process/service, and why it is flagged (unapproved/insecure/public).
Category context
Long-tail utilities that do not fit the current primary taxonomy cleanly.
Source: Tencent SkillHub
Largest current source with strong distribution and engagement signals.
Package contents
Included in package
4 Config1 Docs1 Files
- SKILL.md
- agents/openai.yaml
- assessments/compliance-summary.json
- assessments/openclaw-assessment.json
- references/approved_ports.template.json
- assessments/compliance-dashboard.html