skill-update-delta-monitor

Helps detect security-relevant changes in AI skills after installation. Tracks deltas between the audited version and current version, flagging updates that...

This skill appears coherent for its stated purpose. Before using it, be aware that: (1) it will need read access to skill repositories or snapshots and may clone/fetch code and manifests (network access) to compute diffs; (2) it does not request credentials up front, so you must supply any private repo or registry credentials manually if needed; (3) the tool can only surface changes (not intent)—you should review flagged deltas manually before acting (especially permission expansions or new outbound endpoints); and (4) if you allow the agent to run this skill autonomously, it will be able to access any repositories or local paths you grant it, so limit those permissions to what’s strictly necessary.

Type: OpenClaw Skill Name: skill-update-delta-monitor Version: 1.0.0 This skill is designed to detect security-relevant changes in other AI skills post-installation, such as permission expansions, new network endpoints, and instruction drift. Its stated purpose is to enhance security by identifying potential malicious updates in other skills. The required binaries (`curl`, `python3`, `git`) are appropriate for its function of fetching, comparing, and analyzing skill versions. There is no evidence of malicious intent, data exfiltration, unauthorized execution, or prompt injection against the agent within the skill's own description or requirements. It acts as a security monitoring tool, not a threat.