Audit and enforce security policy baselines. Use when generating policy docs, checking compliance strength, rotating access controls, auditing configs.

How to install Policy?

Run: claude skill add --url github.com/openclaw/skills/tree/main/skills/bytesagain3/policy

Policy

Name: Policy
Rating: 5 (3743 reviews)
Author: BytesAgain

A comprehensive security policy management toolkit for generating policies, checking compliance strength, rotating access controls, auditing configurations, and managing credential lifecycles. Works entirely offline with local storage, zero configuration required.

Why Policy?

Works entirely offline — your data never leaves your machine
12 core security commands covering the full policy lifecycle
Simple command-line interface, no GUI needed
Export to JSON, CSV, or plain text anytime
Automatic history and activity logging with timestamps

Commands

Command	Description
`policy generate <input>`	Generate security policies, compliance documents, or access rules
`policy check-strength <input>`	Check the strength of passwords, keys, or security configurations
`policy rotate <input>`	Rotate credentials, API keys, or access tokens
`policy audit <input>`	Audit security configurations, access logs, or compliance status
`policy store <input>`	Store security records, policy snapshots, or credential metadata
`policy retrieve <input>`	Retrieve stored policy records or credential metadata
`policy expire <input>`	Mark credentials or policies as expired, track expiration dates
`policy policy <input>`	Define, update, or review policy rules and baselines
`policy report <input>`	Generate security audit reports and compliance summaries
`policy hash <input>`	Hash values for verification, integrity checks, or storage
`policy verify <input>`	Verify hashes, signatures, or policy compliance status
`policy revoke <input>`	Revoke access tokens, certificates, or credentials
`policy stats`	Show summary statistics for all logged entries
`policy export <fmt>`	Export data (json, csv, or txt)
`policy search <term>`	Search across all logged entries
`policy recent`	Show last 20 activity entries
`policy status`	Health check — version, data dir, disk usage
`policy help`	Show full help with all available commands
`policy version`	Show current version (v2.0.0)

Each core command (generate, check-strength, rotate, audit, store, retrieve, expire, policy, report, hash, verify, revoke) works in two modes:

Without arguments: shows recent entries from that command's log
With arguments: records the input with a timestamp and saves to the command-specific log file

Data Storage

All data is stored locally at ~/.local/share/policy/. Each command maintains its own .log file (e.g., generate.log, audit.log, rotate.log). A unified history.log tracks all activity across commands with timestamps. Use the export command to back up your data in JSON, CSV, or plain text format at any time.

Requirements

Bash 4.0+ (uses set -euo pipefail)
Standard Unix utilities: date, wc, du, tail, grep, sed, cat, basename
No external dependencies or API keys required
Works on Linux, macOS, and WSL

When to Use

Security compliance audits — Run policy audit and policy report to document compliance posture and generate audit trails
Credential rotation workflows — Use policy rotate and policy expire to track and enforce regular credential rotation schedules
Password and key strength assessment — Run policy check-strength to evaluate the strength of passwords, keys, or security configs before deployment
Policy document generation — Use policy generate and policy policy to create, update, and maintain security policy documentation
Access control lifecycle management — Combine policy store, policy retrieve, policy verify, and policy revoke to manage the full lifecycle of credentials and access tokens

Examples

bash

# Generate a security policy document
policy generate "SOC2 access control policy for production databases"

# Check password strength
policy check-strength "MyP@ssw0rd2024! — evaluate complexity and entropy"

# Rotate an API key
policy rotate "AWS IAM key for deployment-bot — rotated 2024-03-18"

# Audit firewall configuration
policy audit "iptables rules on prod-web-01 — check for open ports"

# Store credential metadata
policy store "GitHub PAT for CI/CD — expires 2024-06-01 — scope: repo,workflow"

# Verify a hash
policy verify "SHA256 checksum for release-v2.0.0.tar.gz"

# Revoke an expired token
policy revoke "OAuth2 refresh token for legacy-app — expired"

# View statistics across all commands
policy stats

# Export all data as CSV
policy export csv

# Search for a specific term
policy search "production"

Output

All commands return structured text to stdout. Redirect to a file with policy <command> > output.txt. Exported files are saved to the data directory with the chosen format extension.

Configuration

The data directory defaults to ~/.local/share/policy/. The tool auto-creates this directory on first run.

Policy

安装

文档

Policy

Why Policy?

Commands

Data Storage

Requirements

When to Use

Examples

Output

Configuration