Slowmist Security Cc

SlowMist AI Agent Security Review — comprehensive security framework for skills, repositories, URLs, on-chain addresses, and products (Claude Code version)

This skill appears to be a genuine security-review framework and is mostly self-contained (markdown guidance only). Before installing or enabling it: 1) Confirm you are comfortable with the skill reading/writing in your agent's ~/.claude directories (it recommends writing logs and reading CLAUDE.md / memory files); if not, run it in a sandboxed agent or deny filesystem access. 2) If you intend to use on-chain AML features (MistTrack/Dune), expect to provide API keys—verify where those keys would be used and do not supply unrelated credentials. 3) Because the skill can record persistent audit logs, review the exact log location and content format so sensitive data isn't stored unintentionally. 4) Keep the 'human approval' requirement for HIGH/REJECT findings — do not allow unattended autonomous actions for sensitive operations. If you want a safer test, run the skill in a restricted environment, inspect any created log files, and only then allow broader access.

Type: OpenClaw Skill Name: slowmist-security-cc Version: 1.0.0 The bundle is a comprehensive security review framework (SlowMist Security Review) designed to guide an AI agent in auditing external inputs like skills, repositories, URLs, and blockchain addresses. It consists entirely of defensive instructions, checklists, and pattern libraries (e.g., red-flags.md, social-engineering.md) aimed at identifying malicious behavior in other software. There is no evidence of malicious intent, data exfiltration, or unauthorized execution; the framework is transparently documented and aligns perfectly with its stated purpose of enhancing agent security.