← Back to Skills Marketplace
Threshold Keel
by
Threshold Signalworks
· GitHub ↗
· v0.2.7
· MIT-0
167
Downloads
2
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install threshold-keel
Description
Safety guardrails for autonomous agents. Intercepts destructive actions, requires structured approval before irreversible operations, with CLI-backed cryptog...
Usage Guidance
This skill is internally consistent with a safety/approval tool, but take two precautions before installing or enabling it fully: (1) If you want durable cryptographic audit trails, the skill directs you to `pip install threshold-keel` — verify the package (PyPI listing, checksum, project homepage/repository and maintainer) before running pip, since pip installs execute third-party code. Consider using a virtual environment or sandbox to evaluate the CLI. (2) Only set KEEL_CLOUD_API_KEY if you trust Threshold Cloud and understand that WAL/events and policies will be synced to their service. If you prefer behavioural-only protection, use the instructions-only mode (do not run `keel init` or create ~/.keel) and be aware that this relies on the agent following the SKILL.md rules rather than having an enforceable local audit trail.
Capability Analysis
Type: OpenClaw Skill
Name: threshold-keel
Version: 0.2.7
The threshold-keel skill is a comprehensive safety guardrail system designed to prevent autonomous agents from performing unintended or destructive actions. It implements a tiered risk model (T0-T3), requires structured human approval for irreversible operations, and maintains a cryptographic audit trail (Write-Ahead Log) via a local CLI or optional cloud sync. The instructions in SKILL.md are highly security-conscious, including specific mitigations against shell injection (preferring file-based inputs over inline JSON) and a 'Skill Vetting' rule to protect the agent from malicious third-party plugins. No evidence of data exfiltration, unauthorized execution, or malicious intent was found.
Capability Assessment
Purpose & Capability
Name and description describe a guardrail/audit tool; the SKILL.md consistently describes classifying actions, requiring approvals, and optionally delegating durable state to a `keel` CLI. The declared binaries (python3, pip3) and optional KEEL_CLOUD_API_KEY are appropriate for a CLI distributed via pip. Minor inconsistency: the registry metadata indicates no install spec, but the skill's embedded metadata and prose recommend installing a pip package (`threshold-keel`).
Instruction Scope
Instructions focus on classifying and gating state-changing actions, using the CLI when present, and keeping state durable only via the CLI. The file- and path-level references (e.g., suggested /tmp action JSON, warning about ~/.keel files) are within scope for a policy/approval tool. The skill assumes the agent has access to user resources (email, files, calendar, messaging) — that is a capability assumption but aligned with the stated purpose of intercepting actions across those channels.
Install Mechanism
The registry has no install spec, but the SKILL.md recommends installing a pip package named `threshold-keel` and using the `keel` CLI. Installing a third-party pip package is a normal delivery mechanism for a CLI, but it means arbitrary code will run on the host. The platform did not provide a vetted install spec; users should verify the package origin (PyPI/project homepage) before installing.
Credentials
The only environment variable required is an optional KEEL_CLOUD_API_KEY (for cloud sync). No unrelated secrets or multiple unrelated credentials are requested. This is proportionate to the described CLI+Cloud feature.
Persistence & Privilege
The skill does not request always:true, does not demand persistent installation, and explicitly differentiates 'instructions only' (no durable state) from CLI-managed durable state. Normal autonomous invocation is allowed by default; this combined with the optional cloud sync is expected for this kind of tool.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install threshold-keel - After installation, invoke the skill by name or use
/threshold-keel - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.2.7
- Changed Python package installer from "uv" to "pip" in the install metadata.
- No other changes detected; skill behavior and documentation remain the same.
v0.2.6
threshold-keel 0.2.6
- Clarified that agent should not create or manage state files (e.g. ~/.keel/) directly in instructions mode; only the CLI manages durable state.
- Updated documentation to emphasize that instructions mode is a behavioural safety layer with session-only tracking, not a persistent audit system.
- Updated homepage link to a new canonical URL.
- Improved description to highlight CLI-backed cryptographic audit trails and policy enforcement.
- Removed advice to create local state files in instructions mode, preventing incompatibility with CLI usage.
v0.2.5
- Added detailed SKILL.md documentation outlining Keel’s risk tiers, execution modes, core safety rules, and approval workflows for autonomous agents.
- Introduced classification and handling requirements for all actions (T0–T3), including strict structured approval rules for destructive operations.
- Described three execution modes: instructions only, local CLI, and CLI with cloud sync.
- Specified CLI usage for logging, policy evaluation, audits, and quarantine management.
- Clarified quarantine-first policy for deletions, batch approval limits, and mandatory user previews for irreversible actions.
Metadata
Frequently Asked Questions
What is Threshold Keel?
Safety guardrails for autonomous agents. Intercepts destructive actions, requires structured approval before irreversible operations, with CLI-backed cryptog... It is an AI Agent Skill for Claude Code / OpenClaw, with 167 downloads so far.
How do I install Threshold Keel?
Run "/install threshold-keel" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Threshold Keel free?
Yes, Threshold Keel is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Threshold Keel support?
Threshold Keel is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Threshold Keel?
It is built and maintained by Threshold Signalworks (@andaltan); the current version is v0.2.7.
More Skills