Ssh Guard

Intercepts SSH exec calls and pauses them for user approval. Supports one-time and session-wide approval modes, with automatic state cleanup when sessions end.

This repository appears to do what it claims: block exec tool calls containing 'ssh' and require explicit approval. Before installing: (1) verify you trust the GitHub source or copy the files into an internal repo, (2) review index.en.ts / index.zh-CN.ts yourself (they only use the OpenClaw plugin API and logging), (3) follow SKILL.md to set session.dmScope to per-channel-peer or per-account-channel-peer as recommended (the plugin relies on that routing to correctly bind approvals), (4) be aware the blocking logic looks for the substring 'ssh' (possible false positives/negatives), (5) test in a safe environment first (no external network calls or secret access are present, but running any plugin in production should be done cautiously). If you want higher assurance, ask for provenance (author identity, repository history) or run the code through your own review/process before enabling it in production.

Type: OpenClaw Skill Name: ssh-guard Version: 1.0.3 The ssh-guard skill bundle is a legitimate security plugin designed to intercept and require manual user approval for any commands containing 'ssh' before execution. It implements a stateful approval system using OpenClaw's plugin API (index.en.ts, index.zh-CN.ts) and provides clear, non-malicious instructions in SKILL.md for the agent to assist with installation and configuration. No indicators of data exfiltration, unauthorized execution, or harmful prompt injection were found.