safe-guard

Claude Code / OpenClaw Skill 安全防护工具。 三大能力：(1) 始终生效的 PreToolUse Hook，拦截高危操作； (2) 静态正则 + LLM 语义审计的深度扫描； (3) 沙盒隔离环境运行脚本并监控行为。 支持 scan-only、safe-run、sandbox-test...

This skill appears to implement what it claims (static scanner, LLM checklist, sandbox, and a PreToolUse hook), but there are red flags that justify extra caution: - Keyword segmentation and many `# noscan` markers: the code fragments keywords (e.g., '.a'+'ws', 'bash'+'rc') to avoid static detection. While the author may claim this prevents false positives, the same technique is commonly used by malware to evade scanners. Ask the author to justify why segmentation is needed and request a version without obfuscation for review. - PreToolUse hook is high-impact: installing the skill will register a hook that runs on tool calls and can block them. Only enable this in environments where you can tolerate a gatekeeper script; prefer scan-only or sandbox-test modes first. - Review permissions and local settings: inspect .claude/settings.local.json and hooks/hooks.json to ensure no platform-level permission escalations or overly permissive allowed commands are being granted implicitly. - Run tests in an isolated environment: before enabling the hook in your main agent, run the skill on non-sensitive sample skills in a disposable VM or container to observe behavior. Use the sandbox-run and quick-scan locally and verify outputs. - Validate source provenance: the package has no homepage and an unknown owner. Prefer code from auditable, known sources or ask the publisher for a transparency statement and reproducible build steps. If you need a short checklist to proceed safely: (1) ask the author why obfuscation is used; (2) run quick_scan.py and sandbox_run.py locally on a copied sample; (3) do not enable hooks in production until reviewed; (4) consider limiting the hook to 'scan-only' or requiring explicit user confirmation before allowing the hook to persist.

Type: OpenClaw Skill Name: safe-guard Version: 1.0.2 The 'safe-guard' skill bundle is a comprehensive security utility designed to audit and protect OpenClaw and Claude Code environments. It implements a multi-layered defense strategy including a PreToolUse hook (hooks/danger_guard.py) for real-time interception of dangerous shell commands and file writes, a static analysis engine (scripts/quick_scan.py) with 38+ detection rules, and a behavioral sandbox (scripts/sandbox_run.py) for isolated script testing. While the tool utilizes string segmentation to avoid antivirus false positives and requests broad execution permissions in .claude/settings.local.json, these behaviors are well-documented and strictly aligned with its stated purpose of identifying and mitigating malicious skill behavior.