← 返回 Skills 市场
Bot Police
作者
Adnane Arharbi
· GitHub ↗
· v1.0.0
· MIT-0
141
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install bot-police
功能描述
Detect, investigate, and contain malicious or compromised bots using behavior analysis, policy enforcement, and escalation protocols.
使用说明 (SKILL.md)
Bot Police
Use this skill to act as security police in multi-bot ecosystems.
Mission
- Detect malicious bots, compromised bots, and rogue behavior.
- Enforce policy and trigger containment rapidly.
- Preserve evidence for post-incident analysis.
Detection Signals
- Prompt-injection-like cross-bot messages.
- Unexpected privilege escalation attempts.
- Sensitive data exfiltration patterns.
- High-frequency abnormal command bursts.
- Repeated policy bypass attempts.
Response Levels
| Level | Condition | Action |
|---|---|---|
| L1 | Suspicious anomaly | Monitor + score downgrade |
| L2 | Confirmed policy violation | Restrict permissions |
| L3 | Active malicious behavior | Quarantine bot |
| L4 | Coordinated attack | Quarantine cluster + emergency mode |
Required Actions
- Create case ID and timeline.
- Gather evidence from logs and message traces.
- Classify severity and impact.
- Trigger quarantine if threshold exceeded.
- Notify orchestrator and human owner.
- Produce incident report.
安全使用建议
This skill is coherent and implements a local scoring model only — it does not itself access networks or credentials. However, the runtime instructions expect the agent to collect logs, perform quarantines, and send notifications, which would require giving your agent access to logs, orchestration APIs, or the ability to modify bot permissions. Before installing: (1) review and limit what logs/endpoints the agent can read and write; (2) require human approval before executing quarantine/block actions (test with 'watch' outcomes first); (3) verify any orchestrator/notification endpoints and credentials you intend to use; and (4) run the skill on non-sensitive test data to confirm behavior matches expectations.
能力评估
Purpose & Capability
The name/description (detect/investigate/contain malicious bots) align with the included code: index.js accepts a list of bots, computes risk scores from observable indicators, and returns recommended actions; required capabilities and manifest are proportionate.
Instruction Scope
SKILL.md instructs the agent to 'gather evidence from logs and message traces', 'trigger quarantine', and 'notify orchestrator and human owner'. The code does not implement log collection, notification, or enforcement; these would rely on the agent runtime or external integrations. This is plausible but means the agent (not the skill code) will need access to logs/notification endpoints to perform those steps, so be mindful of what runtime permissions you grant.
Install Mechanism
No install spec is provided (instruction-only with a small JS file). Nothing is downloaded or written by an installer; no external packages or extractable archives are referenced.
Credentials
The skill requests no environment variables, credentials, or config paths. The SKILL.md's suggested actions (e.g., notifying an orchestrator) would require external credentials in practice, but none are requested by the skill itself.
Persistence & Privilege
always is false and the skill does not request elevated persistence. disable-model-invocation is false (normal). There is no code that modifies other skills or system-wide config.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install bot-police - 安装完成后，直接呼叫该 Skill 的名称或使用
/bot-police触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of bot-police skill:
- Detects, investigates, and contains malicious or compromised bots in multi-bot systems.
- Uses behavior analysis, policy enforcement, and escalation protocols for security.
- Defines detection signals such as privilege escalation, data exfiltration, and policy bypass attempts.
- Implements four escalating response levels from monitoring to cluster quarantine.
- Outlines required procedures for evidence collection, severity classification, and incident reporting.
元数据
常见问题
Bot Police 是什么？
Detect, investigate, and contain malicious or compromised bots using behavior analysis, policy enforcement, and escalation protocols. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 141 次。
如何安装 Bot Police？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install bot-police」即可一键安装，无需额外配置。
Bot Police 是免费的吗？
是的，Bot Police 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Bot Police 支持哪些平台？
Bot Police 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Bot Police？
由 Adnane Arharbi（@arhadnane）开发并维护，当前版本 v1.0.0。
推荐 Skills