📦 Cisco IOSXR Hardening — 实用工具
v1.0.0生成 安全性 hardening configurations 用于 Cisco IOS XR devices 使用 customizable hardening options.
0· 111·0 当前·0 累计
by 安全扫描
OpenClaw
安全
medium confidenceThe skill is an instruction-only description of an external Cisco IOS XR hardening API and is internally consistent with its stated purpose, but there are a few missing integration details you should verify before using it in production.
评估建议
This skill appears to be a thin wrapper describing a third-party API that generates Cisco IOS XR hardening configs. Before installing or using it: (1) verify the API provider (toolweb.in / api.mkkpro.com) reputation and TLS endpoints; (2) confirm whether an API key or account is required — the SKILL.md mentions pricing but doesn't declare authentication or how secrets would be provided; (3) avoid sending real device credentials or full device configs until you understand what the remote service ...详细分析 ▾
✓ 用途与能力
The name/description (generate IOS XR hardening configs) matches the provided SKILL.md and openapi.json: both describe a single POST endpoint that returns generated configuration. There are no unrelated environment variables, binaries, or install steps requested.
ℹ 指令范围
The SKILL.md is instruction-only and documents an external HTTP API (POST /api/hardening/generate and GET /). It does not instruct the agent to read local files, environment variables, or system paths, which keeps scope narrow. However, it also does not show how the AI should authenticate or handle potentially sensitive input (device identifiers, existing configs) when calling the external API.
✓ 安装机制
No install spec or code is included (instruction-only). No downloads or archives are referenced, so nothing will be written to disk by an installer step.
ℹ 凭证需求
The skill declares no required environment variables or credentials, which is consistent with the included openapi.json (no security schemes). That said, the SKILL.md mentions pricing tiers and third-party hosts (toolweb.in, api.mkkpro.com), so in real deployments an API key/account is likely required — the skill doesn't declare this or specify how secrets would be used, which is an omission to verify.
✓ 持久化与权限
always is false and the skill is user-invocable; it does not request permanent presence or elevated agent privileges. There are no instructions to modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install toolweb-cisco-iosxr-hardening
镜像加速npx clawhub@latest install toolweb-cisco-iosxr-hardening --registry https://cn.longxiaskill.com