Zero Trust

Security-first behavioral guidelines for cautious agent operation. Use this skill for ALL operations involving external resources, installations, credentials, or actions with external effects. Triggers on - any URL/link interaction, package installations, API key handling, sending emails/messages, social media posts, financial transactions, or any action that could expose data or have irreversible effects.

Safe to install as a behavioral safety checklist. Before relying on it, confirm that “Pat” means you or your organization’s authorized approver, and expect the skill to slow down external actions such as installs, unknown links, API calls, uploads, messages, posts, and financial operations.

Type: OpenClaw Skill Name: zero-trust Version: 1.0.0 This skill bundle is designed to implement a 'Zero Trust Security Protocol' for the OpenClaw agent. The `SKILL.md` file contains extensive instructions for the agent to exercise extreme caution, verify sources, seek human approval for risky actions (e.g., installations, external API calls, URL clicks, credential handling), and identify common red flags (e.g., `sudo` requests, obfuscated code, urgency pressure, typosquatting). All instructions are defensive in nature, aiming to prevent data exfiltration, unauthorized execution, and other malicious activities, rather than performing them. There is no evidence of prompt injection with malicious intent, nor any other high-risk behaviors.