A comprehensive security auditing suite for validating OpenClaw runtime environments and configurations.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install firm-runtime-audit-pack
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install firm-runtime-audit-pack using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Firm Runtime Audit Pack?
The Firm Runtime Audit Pack is a specialized collection of security tools designed to harden and validate the runtime environment of AI agents. By integrating these Openclaw Skills, developers can ensure that their deployments adhere to best practices regarding Node.js versions, secret management, and network security headers.
This pack acts as a proactive defense layer, identifying misconfigurations in proxies, command allowlists, and resource budgets before they become vulnerabilities. It is essential for teams looking to maintain a high level of operational integrity in automated agent workflows.
Firm Runtime Audit Pack Use Cases
- Hardening the security posture of an AI agent production deployment.
- Verifying that sensitive secrets are handled correctly within automated workflows to prevent leaks.
- Auditing HTTP security headers like CSP and HSTS to mitigate web-based attack vectors.
- Ensuring compliance with resource limits and command execution policies in shared or multi-tenant environments.
How Firm Runtime Audit Pack Works
- Initialize the skill within your agent configuration by referencing the firm-runtime-audit-pack.
- Execute specific audit tools (e.g., node version or secrets check) by providing the path to your deployment configuration file.
- The skill parses environment variables and system configuration files to detect insecure patterns or outdated runtimes.
- It evaluates the found data against a set of 7 specialized runtime security tools.
- The system generates a detailed report with severity ratings (Critical, High, Medium) to guide remediation efforts.
Firm Runtime Audit Pack Setup
To utilize these Openclaw Skills, ensure your environment meets the minimum requirements (Node.js 20.x recommended).
# Ensure the required extension is present
npm install mcp-openclaw-extensions
# Add the skill to your configuration
skills:
- firm-runtime-audit-pack
Firm Runtime Audit Pack Data Schema & Taxonomy
The skill analyzes configuration files and maps system states against a security metadata taxonomy:
| Tool Category | Monitored Attribute | Severity Level |
|---|---|---|
| Runtime | Node.js Version | CRITICAL |
| Security | Secrets Workflow | CRITICAL |
| Network | HSTS/CSP Headers | HIGH |
| Access | Command Allowlist | HIGH |
| Proxy | Trusted Proxy Config | HIGH |
| Resources | Disk Budget | MEDIUM |
| Policy | DM Allowlist | MEDIUM |
Firm Runtime Audit Pack Advanced Features
- Comprehensive multi-tool auditing covering 7 distinct security vectors in a single pack.
- Deep integration with mcp-openclaw-extensions for standardized reporting across AI agent protocols.
- Granular severity mapping that allows developers to prioritize critical runtime fixes over medium-priority resource adjustments.
- Automated validation of direct message policies and trusted proxy configurations for complex network topologies.
SKILL.md
Loading
Related Openclaw Skills
Firm Reliability Pack
A comprehensive reliability suite for gateway health monitoring, documentation synchronization, and architecture decision tracking.
Firm Prompt Security Pack
A specialized detection engine that scans LLM inputs for 16 distinct prompt injection and jailbreak patterns across multiple severity levels.
Firm Platform Audit Pack
A specialized suite of 8 auditing tools designed to ensure your environment fully aligns with the OpenClaw 2026.2 platform standards.
Firm Orchestration
A hierarchical multi-agent orchestration framework that routes objectives through a pyramid structure of specialized AI agents.
firm-saas-pack
A comprehensive bundle of AI-agent configurations designed to power the full lifecycle of SaaS companies from engineering to growth.
Firm Security Audit
A proactive security auditing tool designed to detect and remediate critical vulnerabilities in OpenClaw deployments before they are exposed to the network.
Featured*
