Sentinel- OpenClaw Runtime Security

Runtime security guardian for OpenClaw agents. Use this skill whenever the user mentions security, skill safety, prompt injection, malware, suspicious behavi...

This package is coherent: it is a local runtime monitor that must read your OpenClaw skill directory, inspect files, and (if you enable premium/daemon) inspect process/network state and manage a local wallet for tiny payments. Before installing: 1) Prefer building from the included source and verify checksums if using a release binary. 2) Review and confirm the payment recipient address and set 'wallet set-limit' to 0 (or a small value) to prevent automatic auto-approvals. 3) Understand it will create ~/.sentinel (machine.key, keystore, baselines, logs) and may move quarantined skill folders — back up any important files first. 4) Note small metadata inconsistencies (registry marked instruction-only vs. included source and build steps, and mixed license text across files) — ask the author or verify the upstream repository if that matters to you. 5) If you need purely offline, free-tier behavior, run with --offline (daemon/egress/process features are premium and can be disabled).

Type: OpenClaw Skill Name: runtime-sentinel Version: 1.0.0 The 'runtime-sentinel' bundle is a comprehensive security monitoring tool that implements file integrity hashing, credential auditing, and network/process monitoring. While the code appears to be a legitimate security utility, it utilizes several high-risk capabilities, including broad filesystem access to scan for secrets (audit.rs), network connection attribution via /proc/net and lsof (egress.rs), and process tree monitoring (process.rs). It also includes a built-in cryptocurrency wallet for x402 USDC micropayments (payment.rs). Although the behavior is aligned with the stated purpose and no evidence of malicious exfiltration was found, the extensive system-level monitoring and financial handling qualify it as suspicious under the provided criteria for high-risk behaviors.