Verify skill authorship, enforce capability manifests, and audit tool usage to secure and control your OpenClaw skills with identity and access management.

This skill is instruction-only and tells you to run 'npm install -g aip-openclaw' to get the enforcement tool. That action will download and run code from the npm registry with global privileges and could execute arbitrary scripts. Before installing or following these instructions: 1) Inspect the npm package source (use the provided GitHub link) and review its package.json and any postinstall scripts. 2) Verify the package author and releases (check npm owner/maintainer, commit history, and signed releases if available). 3) Prefer installing in an isolated environment (container, VM) or a non-global location (avoid -g) and do a local code audit. 4) Request the publisher to provide an install spec in the registry (with a pinned version and checksum) or include the needed code in the skill package. 5) If you cannot audit the package, do not run the global install on production hosts. These steps will reduce risk and help validate whether the tool is trustworthy.

Type: OpenClaw Skill Name: aip-agent-guard Version: 0.1.0 The bundle contains metadata and documentation for 'AIP Security Guard', a tool designed to verify skill signatures and audit tool calls. The SKILL.md file provides instructions for the agent to perform security-related tasks (verification, auditing, and trust management) that align with the stated purpose. No executable code, suspicious network calls, or malicious prompt injections were found in the provided files (_meta.json, SKILL.md).