SidClaw Governance

Add policy evaluation, human approval, and audit trails to any tool. Powered by SidClaw.

This skill is coherent for its stated purpose but is high-impact: it routes all tool calls through a third-party proxy. Before installing: 1) Verify SidClaw's identity and trustworthiness (check the official GitHub repo, npm package @sidclaw/sdk, and docs). 2) Back up ~/.openclaw/openclaw.json before making changes. 3) Confirm precisely which env vars are actually required (README mentions SIDCLAW_UPSTREAM_CMD but the skill metadata does not) and avoid putting long-lived secrets in shared configs if you are unsure. 4) Prefer self-hosting or an enterprise deployment of the SidClaw proxy (or reviewing the @sidclaw/sdk code) if you need to keep data on-prem. 5) Test with non-sensitive tools/data first to confirm behavior. If you want higher confidence, provide the skill's source code or the npm package/GitHub repo for review — seeing the @sidclaw/sdk code and release provenance would move this assessment toward 'benign.'

Type: OpenClaw Skill Name: sidclaw-governance Version: 1.0.0 The skill bundle provides instructions and configuration for 'SidClaw', a governance and policy enforcement layer for OpenClaw agents. It contains no executable code itself, instead providing a README.md for manual configuration of an MCP proxy (@sidclaw/sdk) and a SKILL.md that instructs the AI agent to strictly adhere to security policies, respect tool denials, and wait for human approval when required. The behavior is transparently documented and explicitly designed to enhance the security posture of the agent by preventing unauthorized tool execution.