Openclaw Sentinel

Supply chain security for agent skills. Pre-install inspection, post-install scanning, obfuscation detection, and known-bad signature matching. Verify skills are safe before they touch your workspace. Free alert layer — upgrade to openclaw-sentinel-pro for quarantine, blocking, and community threat feeds.

This appears to be a legitimate local supply-chain scanner that only needs python3 and will read and write under your OpenClaw workspace. Before installing or running: (1) obtain the repository from a trusted source (registry shows no homepage), (2) review the full scripts/sentinel.py for any code paths that rename/move skill directories or make outbound network calls, (3) run it first in a copied/isolated workspace if you are worried about quarantine actions, (4) confirm whether importing community threat lists (--update-from) is local-only or can fetch remote feeds, and (5) note the metadata mismatch: OPENCLAW_WORKSPACE is used but not declared as a required env var in the registry. If you need higher assurance, request the maintainer's source URL and verify release signatures before trusting automated quarantining or updates.

Type: OpenClaw Skill Name: openclaw-sentinel Version: 1.0.2 The OpenClaw Sentinel skill is a security scanner designed to detect supply chain risks in other skills. Its Python script (`scripts/sentinel.py`) strictly adheres to its stated purpose and claims of 'No External Dependencies' and 'No network calls', using only standard library modules and performing local file system operations. The patterns and behaviors it identifies (e.g., `eval(base64.b64decode(...))`, `os.system()`, `socket.connect()`) are for *detection* in other skills, not for self-execution. Features like 'quarantine' and 'reject' involve renaming or moving skill directories within the workspace, which are legitimate defensive actions. There is no evidence of intentional harmful behavior, data exfiltration, backdoors, or prompt injection attempts in `SKILL.md` or `README.md`.