Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
- Snark reduction. - Markdown formatting fixes plural - versioning tracking :) maybe i went a bit too hard on 1.0.0. my apologies.
What This Skill Does
A non-executable OPSEC reminder document for both humans and AI agents. Covers basic due diligence around reviewing and trusting scripts before execution in agentic systems. Written in response to observed abuse of agent trust to cause real harm via malicious skill files.
Addresses the specific attack surface of malicious skill files in agentic systems, a gap that general security checklists do not cover.
When to use it
- Reviewing a third-party skill file before letting an agent execute it
- Spot-checking automated scripts in an agentic pipeline before deployment
- Onboarding team members to baseline OPSEC practices for AI agent setups
- Deciding whether to trust a downloaded script when its behavior is unclear
- Establishing a human-readable policy for agents running with minimal supervision