โ† All skills
Tencent SkillHub ยท Security & Compliance

AOI OpenClaw Security Toolkit (Core)

Run local-only fail-closed security checks to detect and report data leaks, secrets, egress risks, and prompt injections before publishing or committing code.

skill openclawclawhub Free
0 Downloads
0 Stars
0 Installs
0 Score
High Signal

Run local-only fail-closed security checks to detect and report data leaks, secrets, egress risks, and prompt injections before publishing or committing code.

โฌ‡ 0 downloads โ˜… 0 stars Unverified but indexed

Install for OpenClaw

Quick setup
  1. Download the package from Yavira.
  2. Extract the archive and review SKILL.md first.
  3. Import or place the package into your OpenClaw setup.

Requirements

Target platform
OpenClaw
Install method
Manual import
Extraction
Extract archive
Prerequisites
OpenClaw
Primary doc
SKILL.md

Package facts

Download mode
Yavira redirect
Package format
ZIP package
Source platform
Tencent SkillHub
What's included
SKILL.md, _meta.json, docs/SECURITY_POLICY.md, integrity_manifest.json, package.json, rules/egress_patterns.txt

Validation

  • Use the Yavira download entry.
  • Review SKILL.md after the package is downloaded.
  • Confirm the extracted package contains the expected setup assets.

Install with your agent

Agent handoff

Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.

  1. Download the package from Yavira.
  2. Extract it into a folder your agent can access.
  3. Paste one of the prompts below and point your agent at the extracted folder.
New install

I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.

Upgrade existing

I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.

Trust & source

Release facts

Source
Tencent SkillHub
Verification
Indexed source record
Version
0.1.6

Documentation

ClawHub primary doc Primary doc: SKILL.md 4 sections Open source page

AOI OpenClaw Security Toolkit (Core)

Why: Prevent โ€œone bad commitโ€ incidents (accidental file leakage + secret exposure) with a fast, local-only, fail-closed check. When: Before committing/pushing, before publishing a skill, and when reviewing scripts/skills for unexpected egress behavior. How: Run a single command to get PASS/WARN/BLOCK and an optional redaction-safe report. Scope: Detection + reporting only (no auto-fix, no uploads, no auto-posting). Quickstart: openclaw-sec check --preset repo --diff staged This is a public-safe toolkit skill. Does: detect + report risks (PASS/WARN/BLOCK) Does NOT: auto-fix, auto-upload, auto-post, or exfiltrate data

CLI

Binary: openclaw-sec Common: openclaw-sec check --lang en openclaw-sec check --lang ko openclaw-sec scan-secrets openclaw-sec scan-egress openclaw-sec scan-prompt --file inbound.txt Exit codes: 0 PASS 1 WARN 2 BLOCK

Default scan scope

If --paths is omitted, it scans existing paths among: . skills/ scripts/ context/

Rules

Rule files live in rules/: secret_patterns.txt egress_patterns.txt prompt_injection_patterns.txt Edit these to tune sensitivity.

Category context

Identity, auth, scanning, governance, audit, and operational guardrails.

Source: Tencent SkillHub

Largest current source with strong distribution and engagement signals.

Package contents

Included in package
3 Config2 Docs1 Files
  • SKILL.md Primary doc
  • docs/SECURITY_POLICY.md Docs
  • _meta.json Config
  • integrity_manifest.json Config
  • package.json Config
  • rules/egress_patterns.txt Files