ZT4AI Self-Audit

Zero Trust security audit for AI agent workspaces, skills, and configurations. Based on Microsoft's Zero Trust for AI (ZT4AI) framework and the "Caging the A...

This skill appears coherent for auditing agent skills and workspace integrity. Before running: (1) inspect the included scripts (scripts/integrity-check.sh) to ensure they haven't been tampered with; (2) generate the initial baseline only after manual review of files you trust; (3) run the audit in a sandbox or with least-privilege user if possible (the curl test will make an outbound request to httpbin.org); and (4) treat the integrity baseline as sensitive — an attacker who can modify it can hide tampering. If you want higher assurance, run the checks on an isolated host or review the script line-by-line prior to execution.

Type: OpenClaw Skill Name: zt4ai-self-audit Version: 1.0.0 This skill bundle is a defensive security tool designed to perform self-audits of an OpenClaw agent's environment based on Zero Trust for AI (ZT4AI) frameworks. It includes a shell script (scripts/integrity-check.sh) for SHA256 integrity verification and comprehensive markdown instructions (SKILL.md) for identifying credential leaks, excessive privileges, and prompt injection risks. The behavior is transparent, well-documented, and lacks any indicators of malicious intent, data exfiltration, or obfuscation; even the network check to httpbin.org is explicitly framed as a connectivity test for egress auditing.