Tork Guardian

AI governance and safety layer for OpenClaw agents. Protects against unsafe actions, redacts sensitive data, and generates compliance audit trails.

What to check before installing: 1) Provenance: this registry listing shows 'source: unknown' and advertised Requirements = none, but the package files (package.json, README, SKILL.md, src/) clearly expect a TORK_API_KEY and network access to tork.network and GitHub. Confirm you are installing the official package (check the npm package owner, GitHub repo, and package signatures) and that the homepage (https://tork.network) is legitimate. 2) API key scope & trust: the SDK will send content and threat reports to the remote Tork API. Decide whether you trust that endpoint with redacted or raw content. Inspect how the client constructs requests (src/client.ts). Consider using a limited-scope API key and review privacy/retention policies for tork.network. 3) Manifest mismatch: ask why the registry metadata omitted required env/network declarations. Installers relying on the registry may not prompt for network/env permissions; that omission is an incoherence you should resolve. 4) Prompt-injection strings: SKILL.md triggered prompt-injection pattern matches. Open the SKILL.md and README and manually search for any embedded instruction-like payloads; if present, ask the publisher to remove them or explain why they're harmless (example text vs. malicious injection). 5) Run the scanner locally first: if you want extra confidence, download the package source, run a local audit and the included tork-scan CLI in a controlled environment (the package's scanner writes temp files and cleans them up). Review network calls (axios usage) to see exactly what is sent. 6) Least privilege: if you enable this skill in production, use a configuration (e.g., strict policy, allowlist) that limits outbound domains and ports, and minimize logging of sensitive data. Because the client has a 'fail-open' behavior when the Tork API is unreachable, be aware that governance may be bypassed temporarily; decide whether that behavior matches your security posture. If you cannot verify the package owner or the SKILL.md prompt artifacts, treat the package as untrusted until provenance and the manifest omissions are resolved.

Type: OpenClaw Skill Name: tork-guardian Version: 1.0.2 This OpenClaw skill bundle, 'Tork Guardian', is a security and governance layer designed to protect AI agents. Its code and documentation consistently demonstrate an intent to detect PII, enforce policies, control tool access, and scan other skills for vulnerabilities. Key indicators include explicit blocklists for dangerous shell commands and sensitive file paths, network access controls (SSRF prevention, reverse shell detection), and a security scanner with rules to identify common vulnerabilities and prompt injection patterns. Network communication to `tork.network` and `api.github.com` is explicitly declared and justified by the skill's stated purpose (governance API and skill scanning, respectively). There is no evidence of intentional harmful behavior or data exfiltration beyond its stated security functions.