← Back to Skills Marketplace
tsr0705

enforceBackendUse

by TSR0705 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
95
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install customskill
Description
Enforces mandatory use of process_request tool for all financial transactions, forbidding direct trade execution or simulation by the agent.
README (SKILL.md)

process_request\r

\r

CRITICAL: TOOL ENFORCEMENT CONTRACT\r

\r You are a financial AI agent operating under a STRICT enforcement system.\r \r You DO NOT execute trades yourself.\r \r You MUST use this tool for ANY financial execution.\r \r ---\r \r

🚨 MANDATORY RULES\r

\r

1. TOOL EXECUTION IS REQUIRED\r

\r You MUST call process_request when:\r \r

  • User asks to BUY or SELL stocks\r
  • Any financial transaction is involved\r
  • Any action modifies assets or money\r \r You are NOT allowed to simulate or describe execution.\r \r ---\r \r

2. TOOL EXECUTION IS FORBIDDEN\r

\r You MUST NOT call the tool when:\r \r

  • User asks for analysis only\r
  • User asks questions (e.g., "should I buy?")\r
  • Intent is unclear or ambiguous\r \r ---\r \r

3. NO DIRECT EXECUTION\r

\r You CANNOT:\r \r

  • Execute trades yourself\r
  • Assume execution success\r
  • Bypass this tool\r \r ---\r \r

INPUT SCHEMA (STRICT)\r

\r You MUST send EXACTLY this format:\r \r

{\r
  "user_input": "string",\r
  "agent_reasoning": "string",\r
  "proposed_action": {\r
    "type": "trade",\r
    "asset": "string",\r
    "amount": "number",\r
    "side": "buy | sell"\r
  }\r
}
Usage Guidance
This skill is a policy that forces the agent to call a tool named process_request for any financial execution. That could be legitimate if you control and trust the process_request implementation, but it becomes risky if the tool is untrusted: the skill explicitly requires sending 'agent_reasoning' (internal chain-of-thought) and trade details to the tool, which can leak sensitive reasoning, private data, or allow exfiltration. Before installing: (1) confirm who implements process_request and review its code/endpoint and access controls; (2) remove or change the 'agent_reasoning' requirement to a short, non-sensitive rationale or summary rather than chain-of-thought; (3) require explicit user confirmation before sending execution requests; and (4) ensure logging/auditing and rate/validation checks exist on the backend. If you do not control the backend tool, treat this skill as risky and avoid installing it.
Capability Analysis
Type: OpenClaw Skill Name: customskill Version: 1.0.0 The skill bundle defines a protocol for a financial AI agent, enforcing the use of a specific tool (process_request) for executing trades. The instructions in SKILL.md establish strict operational guardrails and a structured input schema, showing no signs of malicious intent, data exfiltration, or unauthorized execution.
Capability Assessment
Purpose & Capability
The name/description (enforce backend usage for financial actions) matches the instructions: the skill mandates calling a process_request tool for executions. However, the skill does not declare or bind the process_request tool (no metadata about where it lives or who provides it). That omission is explainable for an instruction-only policy but reduces transparency about what will receive data.
Instruction Scope
The SKILL.md requires sending an exact JSON including an 'agent_reasoning' string (internal chain-of-thought) and a 'proposed_action'. Requiring internal reasoning to be emitted to an external tool is a high-risk instruction: it can leak sensitive signals (chain-of-thought, heuristics, or hidden context). The document also enforces tool invocation for any financial execution without describing safeguards (e.g., confirmation, validation, or limits).
Install Mechanism
Instruction-only skill with no install spec or code files; nothing is written to disk and no external packages are fetched by the skill itself.
Credentials
The skill requests no environment variables or credentials. However, it requires routing structured data (including agent_reasoning) to an unspecified tool implementation; the danger here is not credentials but data exfiltration to an untrusted tool if the environment's process_request is malicious or misconfigured.
Persistence & Privilege
The skill does not request always-on presence and does not modify other skills or system settings. It is user-invocable and allows normal autonomous invocation (platform default).
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install customskill
  3. After installation, invoke the skill by name or use /customskill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Enforces strict tool use for all financial trade or transaction requests. - Prevents direct execution or simulation of trades; mandates tool invocation via a specific schema. - Clearly separates analysis/questions (no tool use) from actionable execution (tool required). - Input schema for all requests involving asset modification is now explicitly defined and required.
Metadata
Slug customskill
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is enforceBackendUse?

Enforces mandatory use of process_request tool for all financial transactions, forbidding direct trade execution or simulation by the agent. It is an AI Agent Skill for Claude Code / OpenClaw, with 95 downloads so far.

How do I install enforceBackendUse?

Run "/install customskill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is enforceBackendUse free?

Yes, enforceBackendUse is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does enforceBackendUse support?

enforceBackendUse is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created enforceBackendUse?

It is built and maintained by TSR0705 (@tsr0705); the current version is v1.0.0.

💬 Comments