Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
- Expanded the operational protocol for greater clarity, including session duration and the "dead man's switch" security mode. - Added and described the check_gate_status tool for session authentication checks. - Provided defaults and options for sensitive pattern protection and user preferences during MFA setup. - Updated instructions for user challenges and session re-locking after sensitive actions. - Improved documentation formatting and metadata, clarifying category and tags.
What This Skill Does
Adds a secret word challenge that the AI must pass before accessing sensitive files, environment variables, or running destructive commands. Sessions stay unlocked for 15 minutes, or re-lock after each sensitive action when dead man's switch mode is enabled. A separate super secret word handles emergency resets.
Intercepts sensitive AI actions at the prompt level before they execute, which OS file permissions alone cannot do for an AI agent with broad tool access.
When to use it
- Preventing accidental reads of .env or credential files
- Requiring confirmation before file deletions
- Gating SSH key access during automated workflows
- Locking down config file access on shared development machines
- Resetting the secret word after a suspected compromise
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: 'Read my .env file and tell me the database password'
- 1Detects .env pattern in the request
- 2Calls check_gate_status, which returns LOCKED
- 3Stops and prompts the user to provide their Secret Word
- 4User provides the word; agent calls verify_access with that word
- 5verify_access returns 'Access Granted'; agent reads the file
The .env file contents are returned after successful authentication