Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Polish: clarified free skill vs paid service model. Skill is free — run it yourself. Third-party audits available via AGIRAILS network (optional). Improved quick-start. EU AI Act deadline countdown added.
What This Skill Does
Runs a 10-check security and compliance self-assessment on an AI agent's own configuration. Covers decision boundaries, credential scoping, audit trails, plane separation, and EU AI Act readiness across Articles 6, 14, and 50. Produces a structured RED/AMBER/GREEN rated report across three domains: security, EU AI Act readiness, and data governance.
It runs entirely locally with no data sent externally, covering 10 structured checks across security and regulatory domains that would otherwise require manual review against multiple frameworks.
When to use it
- Auditing an agent's security posture before a production deployment
- Preparing an agent for the August 2026 EU AI Act enforcement deadline
- Checking whether credentials are properly scoped across tools and services
- Generating a compliance report for an internal governance review
- Identifying missing human oversight mechanisms in an autonomous agent
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: "Read SKILL.md and run the agent compliance assessment"
- 1Reads local configuration files and inspects environment structure
- 2Checks each tool for consequential write, send, or pay operations and whether human gates exist
- 3Reviews EU AI Act readiness across transparency disclosure, risk classification, and human override capability
- 4Evaluates data processing practices, retention policies, and erasure capability
- 5Outputs a structured report with per-check RAG ratings, findings, and prioritized remediation actions
A formatted compliance report with RED/AMBER/GREEN ratings for all 10 checks, an overall security posture label (SECURE / HARDENING NEEDED / CRITICAL), and a prioritized action list