← 返回 Skills 市场
squallfire

Skill Blocker - 安全守卫

作者 squallfire · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ✓ 安全检测通过
259
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install skill-blocker
功能描述
Blocks execution of dangerous commands and risky operations like destructive deletions, credential theft, code injection, and unauthorized system changes to...
安全使用建议
This skill appears to do what it says: scan for risky patterns and disable dangerous skills. Before installing, confirm you accept that it will read and modify other skill files and write global blocklist/log files in your home/config directories. Recommended precautions: 1) Back up your ~/.openclaw/skills and config; 2) Run the skill in an environment where it has only the minimum filesystem permissions needed; 3) Prefer manual invocation (do not grant autonomous invocation if your platform allows toggling); 4) Audit its actions (inspect memory/blocked-*.log and global-blocklist.json) and keep change history; 5) If possible, require explicit user approval for any automatic disabling of other skills. If you need higher assurance, request the author add safe-guards (dry-run mode, explicit consent prompts, or an allowlist) or review the implementation code (currently there is none bundled).
功能分析
Type: OpenClaw Skill Name: skill-blocker Version: 1.0.1 The skill-blocker bundle (SKILL.md) is a defensive security policy designed to guide an AI agent in identifying and intercepting high-risk operations. It establishes a 'security gatekeeper' role, instructing the agent to block dangerous commands (e.g., rm -rf, credential theft, unauthorized shell execution) and provide a protocol for disabling potentially malicious third-party skills. While it describes administrative actions like renaming directories or modifying configuration files to enforce security, these behaviors are transparently documented and aligned with the stated purpose of system protection.
能力评估
Purpose & Capability
Name/description match the instructions: the skill is an instruction-only 'safety gate' that scans SKILL.md and skill bundles for risky patterns and can disable/blacklist dangerous skills. It does not request unrelated credentials or binaries.
Instruction Scope
The SKILL.md explicitly instructs scanning other skills' SKILL.md and scripts/ directories and provides commands to rename/disable skill folders and add entries to a global blocklist. Those actions fit a blocker role, but they grant the skill broad discretion to inspect and modify other installed skills and to write audit logs under 'memory/*'.
Install Mechanism
Instruction-only skill with no install spec, no downloads or third-party packages. This minimizes supply-chain risk.
Credentials
The skill requests no environment variables or credentials (good). However the runtime behavior assumes write/read access to user config and skill directories (e.g., ~/.openclaw/skills, ~/.openclaw/config/global-blocklist.json, memory/blocked-*.log). Those filesystem accesses are necessary for its function but are sensitive and should be made explicit to the user/operator.
Persistence & Privilege
Although not 'always:true', the skill's documented actions include modifying other skills (renaming/disabling folders) and editing a global blacklist — operations that change system/agent state beyond the skill's own files. That is a high-privilege capability that can be legitimately required for a blocker, but it also increases misuse risk and should be limited, logged, and gated by human approval.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install skill-blocker
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /skill-blocker 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
更新内容说明
v1.0.0
初始版本:自动拦截危险操作,保护系统安全
元数据
Slug skill-blocker
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Skill Blocker - 安全守卫 是什么?

Blocks execution of dangerous commands and risky operations like destructive deletions, credential theft, code injection, and unauthorized system changes to... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 259 次。

如何安装 Skill Blocker - 安全守卫?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-blocker」即可一键安装,无需额外配置。

Skill Blocker - 安全守卫 是免费的吗?

是的,Skill Blocker - 安全守卫 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Skill Blocker - 安全守卫 支持哪些平台?

Skill Blocker - 安全守卫 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Skill Blocker - 安全守卫?

由 squallfire(@squallfire)开发并维护,当前版本 v1.0.1。

💬 留言讨论