{"id":"374a8634-af52-47f0-b733-55165fc58b92","slug":"clawhub-discovery219-linux-firewall-hardening","name":"linux-firewall-hardening","description":"Safe Linux firewall hardening with backend detection, idempotent atomic rules, rollback protection, and AI-executable state-machine workflows. Covers ufw, firewalld, nftables, iptables, Docker, Kubernetes CNI awareness, and fail2ban with compliance mapping to CIS/PCI-DSS/SOC2.","canonicalUrl":"https://www.xpersona.co/agent/clawhub-discovery219-linux-firewall-hardening","sourceUrl":"https://clawhub.ai/discovery219/linux-firewall-hardening","homepage":"https://clawhub.ai/discovery219/skills/linux-firewall-hardening","source":"CLAWHUB","vendor":{"slug":"clawhub","label":"Clawhub","url":"https://clawhub.ai/discovery219/skills/linux-firewall-hardening"},"protocols":["OPENCLEW"],"capabilities":[],"trustScore":null,"trustConfidence":"unknown","artifactCount":0,"benchmarkCount":0,"lastRelease":"2.7.0","freshnessAt":"2026-10-10T17:35:08.257Z","freshnessLabel":"Oct 10, 2026","securityReviewed":true,"openapiReady":false,"stats":[{"label":"Trust score","value":"Unknown"},{"label":"Compatibility","value":"OpenClaw"},{"label":"Freshness","value":"Oct 10, 2026"},{"label":"Vendor","value":"Clawhub"},{"label":"Artifacts","value":"0"},{"label":"Benchmarks","value":"0"},{"label":"Last release","value":"2.7.0"}],"factsPreview":[{"factKey":"vendor","category":"vendor","label":"Vendor","value":"Clawhub","href":"https://clawhub.ai/discovery219/skills/linux-firewall-hardening","sourceUrl":"https://clawhub.ai/discovery219/skills/linux-firewall-hardening","sourceType":"profile","confidence":"medium","observedAt":"2026-10-10T17:35:08.257Z","isPublic":true},{"factKey":"protocols","category":"compatibility","label":"Protocol compatibility","value":"OpenClaw","href":"https://www.xpersona.co/api/v1/agents/clawhub-discovery219-linux-firewall-hardening/contract","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-discovery219-linux-firewall-hardening/contract","sourceType":"contract","confidence":"medium","observedAt":"2026-10-10T17:35:08.257Z","isPublic":true},{"factKey":"traction","category":"adoption","label":"Adoption signal","value":"1.3K downloads","href":"https://clawhub.ai/discovery219/linux-firewall-hardening","sourceUrl":"https://clawhub.ai/discovery219/linux-firewall-hardening","sourceType":"profile","confidence":"medium","observedAt":"2026-10-10T17:35:08.257Z","isPublic":true},{"factKey":"latest_release","category":"release","label":"Latest release","value":"2.7.0","href":"https://clawhub.ai/discovery219/linux-firewall-hardening","sourceUrl":"https://clawhub.ai/discovery219/linux-firewall-hardening","sourceType":"release","confidence":"medium","observedAt":"2026-08-07T00:28:44.752Z","isPublic":true},{"factKey":"handshake_status","category":"security","label":"Handshake status","value":"UNKNOWN","href":"https://www.xpersona.co/api/v1/agents/clawhub-discovery219-linux-firewall-hardening/trust","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-discovery219-linux-firewall-hardening/trust","sourceType":"trust","confidence":"medium","observedAt":null,"isPublic":true}],"highlights":["1.3K downloads","Trust evidence available"],"agentCard":{"name":"linux-firewall-hardening","description":"Safe Linux firewall hardening with backend detection, idempotent atomic rules, rollback protection, and AI-executable state-machine workflows. Covers ufw, firewalld, nftables, iptables, Docker, Kubernetes CNI awareness, and fail2ban with compliance mapping to CIS/PCI-DSS/SOC2.","source":"CLAWHUB","sourceId":"clawhub:s173agn7542hhrs96f5sqxpwwx86k4fs:linux-firewall-hardening","homepage":"https://clawhub.ai/discovery219/skills/linux-firewall-hardening","repository":"https://clawhub.ai/discovery219/linux-firewall-hardening","documentation":"https://www.xpersona.co/agent/clawhub-discovery219-linux-firewall-hardening","protocols":["OPENCLEW"],"examples":[{"kind":"example","language":"text","snippet":"DETECT → SELECT → PLAN → CONFIRM → VALIDATE → APPLY → VERIFY → (COMMIT | ROLLBACK)"},{"kind":"example","language":"bash","snippet":"bash scripts/audit-firewall.sh           # Human-readable\nbash scripts/audit-firewall.sh --json    # Machine-readable"}]}}