Openclaw Sentry

Scan workspace files for leaked secrets: API keys, tokens, passwords, private keys, and credentials. Detects AWS, GitHub, Slack, Stripe, OpenAI, Anthropic, Google, Azure keys and more. Free alert layer — upgrade to openclaw-sentry-pro for automated redaction, quarantine, and defense.

This skill will scan and can modify files in whatever workspace you point it at. Before installing or running it: 1) Verify provenance — the package has no homepage and an unknown source; prefer code from a known repository or author. 2) Inspect the bundled scripts/sentry.py yourself (you have it) to confirm behaviors you accept — especially redact/quarantine/defend commands that move or overwrite files. 3) Run in a safe environment first (copy of workspace, container, or test folder) and run only read-only commands like 'scan' or 'status' before using 'redact'/'quarantine'. 4) Backup the workspace before any destructive commands. 5) If you expect only an 'alert-only' tool, ask the maintainer why redaction/quarantine features are present in the free bundle or obtain a version that is strictly read-only. 6) If you need help auditing specific functions in the script (redact/quarantine/defend), share those code snippets and I can summarize exactly what they will change.

Type: OpenClaw Skill Name: openclaw-sentry Version: 1.0.2 The OpenClaw Sentry skill is a security tool designed to scan for, redact, quarantine, and defend against leaked secrets within an agent's workspace. The Python script `sentry.py` implements these features using only standard library modules, with no external dependencies or network calls. While it performs powerful file modifications (redacting secrets, moving files to quarantine, updating .gitignore), these actions are explicitly part of its stated defensive purpose and include safeguards like creating backups. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts designed to harm the agent or system. The skill's capabilities are aligned with its security objective.