Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Add TOTP step-up authentication for AI agent actions
What This Skill Does
feelgoodbot monitors file integrity on macOS and adds TOTP step-up authentication for AI agent actions. It watches system binaries, shell configs, SSH keys, and AI agent configs for tampering and sends alerts when changes are detected. Agents can require a one-time password from Google Authenticator before executing sensitive operations like payments, deletions, or SSH connections.
Combines passive file integrity monitoring with active per-action OTP gating in a single tool built for macOS agent workflows, rather than requiring separate utilities for each concern.
When to use it
- Detecting unauthorized changes to shell config files
- Requiring OTP confirmation before an agent sends an email
- Monitoring launch daemons for persistence mechanisms added by malware
- Gating agent-initiated file deletions behind step-up authentication
- Auditing AI agent configs like Claude or Cursor for unexpected modifications
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: 'Delete the old backup files'
- 1Run `feelgoodbot totp check delete:*` to check if step-up is required
- 2Receive exit code 1, meaning no valid session exists
- 3Prompt user for a 6-digit OTP from Google Authenticator
- 4Validate the code with `feelgoodbot totp verify <code>`
- 5Proceed with deletion on exit code 0, caching the session for 15 minutes
Backup files deleted after OTP verification; subsequent delete actions within the session window proceed without re-prompting
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.