{"slug":"clawhub-discovery219-linux-firewall-hardening","facts":[{"factKey":"vendor","category":"vendor","label":"Vendor","value":"Clawhub","href":"https://clawhub.ai/discovery219/skills/linux-firewall-hardening","sourceUrl":"https://clawhub.ai/discovery219/skills/linux-firewall-hardening","sourceType":"profile","confidence":"medium","observedAt":"2026-10-10T17:35:08.257Z","isPublic":true},{"factKey":"protocols","category":"compatibility","label":"Protocol compatibility","value":"OpenClaw","href":"https://www.xpersona.co/api/v1/agents/clawhub-discovery219-linux-firewall-hardening/contract","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-discovery219-linux-firewall-hardening/contract","sourceType":"contract","confidence":"medium","observedAt":"2026-10-10T17:35:08.257Z","isPublic":true},{"factKey":"traction","category":"adoption","label":"Adoption signal","value":"1.3K downloads","href":"https://clawhub.ai/discovery219/linux-firewall-hardening","sourceUrl":"https://clawhub.ai/discovery219/linux-firewall-hardening","sourceType":"profile","confidence":"medium","observedAt":"2026-10-10T17:35:08.257Z","isPublic":true},{"factKey":"latest_release","category":"release","label":"Latest release","value":"2.7.0","href":"https://clawhub.ai/discovery219/linux-firewall-hardening","sourceUrl":"https://clawhub.ai/discovery219/linux-firewall-hardening","sourceType":"release","confidence":"medium","observedAt":"2026-08-07T00:28:44.752Z","isPublic":true},{"factKey":"handshake_status","category":"security","label":"Handshake status","value":"UNKNOWN","href":"https://www.xpersona.co/api/v1/agents/clawhub-discovery219-linux-firewall-hardening/trust","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-discovery219-linux-firewall-hardening/trust","sourceType":"trust","confidence":"medium","observedAt":null,"isPublic":true}],"changeEvents":[{"eventType":"release","title":"Release 2.7.0","description":"linux-firewall-hardening 2.7.0 - Added container and network audit tools: `scripts/container-port-audit.sh` (detects Docker DNAT/port-forwarding) and `scripts/ip-consistency.sh` (checks IPv4/IPv6 drift). - Expanded emergency lockout procedure: clarified that the \"emergency ACCEPT\" command may not be auto-executed and must only be performed by a human via serial console. - Introduced explicit CONFIRM state in the state machine, making human confirmation mandatory before any firewall changes. - Added full documentation for `firewall-apply.sh` in `references/firewall-apply.md`. - Removed files related to publishing and the skill card (PUBLISH.md, skill-card.md) to streamline the distribution. - Updated documentation and references to reflect all new scripts and required confirmation process.","href":"https://clawhub.ai/discovery219/linux-firewall-hardening","sourceUrl":"https://clawhub.ai/discovery219/linux-firewall-hardening","sourceType":"release","confidence":"medium","observedAt":"2026-08-07T00:28:44.752Z","isPublic":true}]}