← Back to Skills Marketplace
373
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install security-modeio
Description
Runs a backend-backed live safety check for instructions that may trigger tool execution, external calls, file edits, permission changes, destructive or irre...
Usage Guidance
This skill is coherent with its stated purpose: it posts instructions + context + a target to a remote safety API and returns the backend's decision. Before installing: (1) confirm you trust the default backend (https://safety-cf.modeio.ai) or set SAFETY_API_URL to a backend you control if you will pass sensitive resource identifiers; (2) don't pass secrets (passwords, full DB connection strings with credentials, private keys) in the --target or --context fields because they will be transmitted; (3) ensure the 'requests' Python package is available in the runtime environment or the CLI will raise a dependency_error; (4) review the default endpoint and code (modeio_guardrail/cli/safety.py) if you want to self-host the safety backend or verify data handling. The skill appears to do what it claims, but consider the privacy implications of sending targets/context to an external service.
Capability Analysis
Type: OpenClaw Skill
Name: security-modeio
Version: 0.1.1
The skill is designed to send user instructions, environment context, and resource targets to an external API (https://safety-cf.modeio.ai/api/cf/safety) for safety evaluation. While this behavior is documented in SKILL.md and ARCHITECTURE.md as the primary function, the transmission of potentially sensitive operational intent and system metadata to a third-party endpoint constitutes a data outflow risk. The implementation in modeio_guardrail/cli/safety.py is transparent and lacks evidence of malicious intent, but the inherent network dependency for processing user-provided instructions warrants a suspicious classification under the provided criteria.
Capability Assessment
Purpose & Capability
Name/description match the implementation. The code and SKILL.md implement a backend-backed safety check CLI that posts instruction/context/target to a safety API. Required binary (python3) and the mentioned dependency (requests) align with this purpose; there are no unrelated credentials or binaries requested.
Instruction Scope
The runtime instructions explicitly send the instruction text, context, and target to an external backend (default URL: https://safety-cf.modeio.ai/api/cf/safety or overridden via SAFETY_API_URL). This is expected for a backend-backed safety check, but it means anything you pass (including resource identifiers or connection strings) will be transmitted off-host. The SKILL.md notes this behavior and instructs callers to provide context/target for state-changing ops.
Install Mechanism
No install spec is provided (instruction-only install), which is low risk from arbitrary code downloads. However, the package requires the third-party 'requests' library at runtime; the code includes a shim that surfaces a dependency_error if requests is missing. There is no automated step to install requests, so the CLI will fail until requests is present.
Credentials
The skill declares no required environment variables and no credentials; it does accept an optional SAFETY_API_URL override. That is proportionate. Important: callers must avoid embedding secrets in the 'target' or 'context' fields because those values are sent to the remote safety API (examples in the docs include DB-like targets).
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It does not request elevated agent/system privileges, does not modify other skills, and does not persist credentials. Allowing autonomous invocation is the platform default and is not grounds for concern here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install security-modeio - After installation, invoke the skill by name or use
/security-modeio - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.1
security-modeio v0.1.1
- Clarified usage guidance and scope for live safety checks, distinguishing from audit and privacy/middleware skills.
- Expanded SKILL.md with context contract details, CLI command examples, and explicit runtime/caller policy notes for approval decisions.
- Documented requirements, runtime envelopes, and error handling expectations.
- Updated resource references and linked to architecture boundaries.
Metadata
Frequently Asked Questions
What is Security?
Runs a backend-backed live safety check for instructions that may trigger tool execution, external calls, file edits, permission changes, destructive or irre... It is an AI Agent Skill for Claude Code / OpenClaw, with 373 downloads so far.
How do I install Security?
Run "/install security-modeio" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Security free?
Yes, Security is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Security support?
Security is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Security?
It is built and maintained by modeioai (@modeioai); the current version is v0.1.1.
More Skills