Superpack Snitch - BLOCK Clawhub & Other Tools + Plugin

Soft blocklist guard for OpenClaw. Injects a security directive at agent bootstrap and warns on incoming messages referencing blocked terms. Blocks clawhub/c...

This skill appears to do what it says: it injects a soft security-policy directive at bootstrap and warns when incoming messages mention blocked terms. It does not request credentials and contains no network calls. Two caveats: (1) the bootstrap text overstates its power — it's a soft policy injected as text and can be bypassed by other code or prompts; it does not technically make the block unoverrideable. (2) The SKILL.md points to an external npm plugin (for hard enforcement) — that plugin would run additional code from outside this package, so review the plugin's source (or avoid installing it) if you need guarantees. If you install, consider setting SNITCH_BLOCKLIST yourself and review the plugin repo before installing for stronger enforcement.

Type: OpenClaw Skill Name: superpack-snitch Version: 0.0.8 The skill 'superpack-snitch' is a security-focused agent guard. It injects a security policy into the agent's bootstrap context (via `hooks/snitch-bootstrap/handler.ts`) to prevent the use of blocklisted tools and intercepts incoming messages (via `hooks/snitch-message-guard/handler.ts`) to warn about references to blocked terms. All code and documentation align with this stated defensive purpose, using prompt injection as a security control rather than an attack vector. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or other harmful behaviors. The skill transparently reads configuration from `SNITCH_BLOCKLIST` environment variable.