Setup & Installation
openclaw skills install @compass-soul/agent-safety
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
npx clawhub install agent-safety
What This Skill Does
Automated outbound safety for AI agents and developers. Scans files and staged git content for API keys, tokens, PII, and secrets before they leave the machine. Enforces security at the git level via pre-commit hooks, not prompts.
Unlike prompt-based reminders or inbound scanners, this enforces rules at the commit level so secrets are blocked automatically, not caught after the fact.
When to use it
- Blocking accidental API key commits before they hit GitHub
- Installing a one-time safety hook on a new repo
- Scanning a directory before publishing a package
- Checking for hardcoded emails or SSNs in generated files
- Running a system health check during periodic agent maintenance
Example Workflow
Here's how your AI assistant might use this skill in practice.
INPUT
User asks: install the pre-commit hook on my repo at ~/projects/myapp
AGENT
- 1Resolve scripts/install-hook.sh path relative to the skill file
- 2Run: bash scripts/install-hook.sh ~/projects/myapp
- 3Confirm the hook is written to ~/projects/myapp/.git/hooks/pre-commit
- 4Report that future commits in that repo will be scanned automatically
OUTPUT
Pre-commit hook installed. Any staged secrets or SSNs will block the commit; PII patterns will flag for review.