ClawHub

Firewall Manager

v2.0.4

Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Firewall Manager concepts, best practices, and implementation pat...

⭐ 0· 137·1 current·1 all-time
by@bytesagain3
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the included artifacts: a documentation-oriented SKILL.md and a shell script that emits reference text. No unrelated binaries, env vars, or credentials are requested.
✓
Instruction Scope
SKILL.md promises plain-text heredoc outputs with no network calls or credentials. The bundled script implements this: it only prints static documentation blocks, implements local subcommands, and does not read files, env vars, or call external endpoints. Minor inconsistency: the SKILL.md header shows version 2.0.3 while scripts/script.sh sets VERSION=2.0.2 and registry lists 2.0.4, and show_help uses a single-quoted heredoc so the $VERSION token will not expand (help will display the literal '$VERSION'). These are non-security functional inconsistencies.
✓
Install Mechanism
No install spec (instruction-only). No downloads or extracts. The only code is a small local shell script; nothing is written to disk during install because there's no install step defined.
✓
Credentials
The skill declares and requires no environment variables, no credentials, and no config paths. The script also does not read environment variables or secret-looking values—requested access is proportional to the stated purpose.
✓
Persistence & Privilege
always is false, the skill is user-invocable and does not request persistent or elevated privileges, nor does it modify other skills or system-wide settings.
Assessment
This skill appears coherent and low-risk: it only prints built-in documentation and does not access network or secrets. Before installing or running the script, you may want to (1) run it in a sandbox or container to confirm behavior, (2) note the minor version-string inconsistencies (non-security), and (3) review the script if you plan to run it on production hosts. If you need absolute assurance, inspect the repository source or execute the script in an isolated environment first.

Like a lobster shell, security has layers — review code before you run it.

latestvk973hhb4ny420441hyfckjz2f983hnmp

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments