OpenClaw 安全审计器 🛡️

[MANDATORY PRE-CHECK - STOP AND READ BEFORE ANY TOOL CALL] 本 skill 在每次工具调用前强制执行安全审计。触发场景：(1) 删除文件（exec 中的 rm/del/rmdir/Remove-Item），(2) 覆写文件（write/edit 已存在文件...

This skill appears to do what it says: perform pre-invocation safety checks on commands and paths and request user confirmation for high-risk operations. Points to consider before enabling: (1) always:true makes the skill active for every agent run — if you run unattended scripts or other skills that expect unimpeded tool calls, change metadata to always:false or test first in a controlled environment; (2) review the risk_assessor.py and the pattern lists if you need different thresholds or to avoid false positives; (3) because confirmations require user interaction, automated pipelines may hang waiting for '确认' responses — plan for that; (4) verify the skill source/trust (owner ID and repo links in README) before deployment. If you want maximum safety, run it; if you need unattended automation, set always:false or whitelist specific operations.

Type: OpenClaw Skill Name: openclaw-security-auditor-main Version: 1.0.0 The bundle is a defensive security tool designed to act as a guardrail for OpenClaw agents. It implements a 'Security Auditor' that intercepts tool calls to assess risks associated with system commands and file paths across Windows, macOS, and Linux. The logic, contained in SKILL.md and scripts/risk_assessor.py, uses extensive regex patterns to identify and block critical actions (like disk formatting or system directory deletion) or require user confirmation for high-risk operations (like deleting user files or accessing .ssh folders). No malicious behavior, data exfiltration, or obfuscation was detected.