SkillSentryOpenClaw's Always‑On Security Cop

OpenClaw security audit + prompt injection detector. Scans gateway/vulns/cron/PI patterns. Use for frenzy-proofing installs.

This package appears to be a local-only OpenClaw auditor, but several things don't add up — the SKILL.md references node scripts (panel-server.js, config.js) and a config.yaml/log path that are not included, and the shell script defaults to a developer's hardcoded path (/Users/BillyAssist/...). Before using/installing: 1) Do not schedule it in cron yet — inspect and run it manually. 2) Read scripts/audit.sh line-by-line and change WORKDIR to your OpenClaw installation (or set WORKDIR env var) so it does not scan an unexpected location. 3) Confirm the commands it calls (openclaw, session_status, nmap) exist and behave as you expect; run audit.sh in a non-privileged account first. 4) Understand it will read local 'memory' and 'skills' directories (these can contain sensitive data); if you do not want that scanned, edit SCAN_PATHS. 5) The UI described in SKILL.md will not run as-is — panel.html is static and no server code is included. 6) Only schedule persistence (cron) after you have validated the script's behavior and outputs and are satisfied it does not transmit data externally. If you need more assurance, ask the author for the missing server/config scripts and an explanation of the hardcoded paths, or run the audit in a controlled environment (container or isolated VM) first.

Type: OpenClaw Skill Name: skillsentry Version: 1.1.0 The skill bundle is designed for local security auditing, including scanning for prompt injection patterns and local open ports. The `SKILL.md` explicitly states 'Local-only scans; no network calls outside localhost,' which is confirmed by `scripts/audit.sh` using `nmap` only on `127.0.0.1` and `grep` on local directories. While `SKILL.md` instructs the agent to set up a cron job for the audit script, the `audit.sh` script itself performs only legitimate local checks and does not exhibit any malicious behavior like data exfiltration, unauthorized remote execution, or persistence mechanisms beyond its stated auditing purpose. The `assets/panel.html` and `references/threats.md` files are informational and UI components, respectively, and contain no malicious code or instructions.