Manage UFW and iptables rules from Hermes with threat detection
Can block access if misconfigured. Verify rules before applying them on a production host.
Manages firewall rules for your server so Hermes can safely open ports, close risky access and whitelist trusted IPs. Built for admins who need fast but controlled network changes with real-time threat detection and automatic blocking of suspicious IPs.
Read this skill's SKILL.md in full before installing it. Run it against a disposable host or test account first, and give it the narrowest credentials that still work.
The listing carries an explicit maintainer warning. Test this against something disposable before pointing it at anything you care about.
Listing carries a maintainer warning: "Can block access if misconfigured. Verify rules before applying them on a production host."
This skill executes commands on the machine running the agent. That is the broadest permission you can grant: anything the agent user can do, this skill can do.
This skill's own description refers to "iptables"
It modifies host-level configuration such as firewall rules, certificates or service definitions. A mistake here can lock you out of the machine.
This skill's own description refers to "firewall"
These permissions are inferred from this listing — the credentials it declares, any maintainer warning, and the operations its own description mentions. ClawVault has not audited this skill's source code. Treat it as a starting point for your own review, not a substitute for one.
Hermes skills are on-demand knowledge documents stored in hermes/skills/, which is the single source of truth. Bundled skills are copied there on a fresh install, and hub-installed and agent-created skills land there too. Every installed skill automatically becomes a slash command, so a skill named plan is invoked with /plan.
hermes skills search firewallAdd --source to widen the search: official for curated skills, skills-sh for the public skills.sh directory, browse-sh for site-specific browser automation, or well-known to point Hermes at a site publishing its own skill index.
hermes skills inspect official/<category>/firewallinspect shows the skill's contents and metadata. Use the fully qualified identifier that search returned, which includes its source and category.
hermes skills install official/<category>/firewallIdentifiers are source-qualified, for example official/migration/openclaw-migration or skills-sh/anthropics/skills/pdf. You can also install straight from a URL that serves a SKILL.md. --force overrides non-dangerous policy blocks but will not override a dangerous scan verdict.
/firewallInstalled skills become slash commands in any chat session. Run hermes skills list to see everything available, or /skills from inside a session.
Commands follow the official Hermes Agent documentation. Placeholders such as <owner> are filled in by the search step, because registry references are publisher-scoped.
Hermes checks third-party and community skills against policy before installing, and --force will not override a verdict it considers dangerous. Because Hermes can also write its own skills at runtime, review what the Curator has kept periodically with hermes skills list.
Read this skill's SKILL.md before installing it, so you know what commands it runs and which credentials it reads.
Deploy OpenClaw, Hermes, or PicoClaw on Bluehost with the right template for the job.
Clawaudit is the official automated security audit skill for OpenClaw gateway hosts — currently in active development. It performs threat modelling on your OpenClaw installation, audits skill configurations for dangerous patterns, checks for exposed environment variables, and produces a structured security report. Given thousands of unvetted community skills exist, having an automated auditor on your gateway is increasingly important.
Domain Trust Check gives your OpenClaw agent the ability to verify any URL before visiting it — checking for phishing indicators, active malware, brand abuse and known scam patterns. As agents become more autonomous and browse the web on your behalf, the risk of visiting a malicious URL silently increases. This skill acts as a real-time safety layer querying multiple threat intelligence sources before your agent loads any external page.
Firewall Security Manager gives your OpenClaw agent complete control over server firewalls — managing UFW, iptables and cloud security groups programmatically. Monitor open ports, detect unauthorized access attempts, automate rule changes and generate security reports. Unlike basic firewall skills that only list rules, this skill provides real-time threat detection, automatic blocking of suspicious IPs and integration with threat intelligence feeds.