# Send Compliance Checker to your agent Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually. ## Fast path - Download the package from Yavira. - Extract it into a folder your agent can access. - Paste one of the prompts below and point your agent at the extracted folder. ## Suggested prompts ### New install ```text I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete. ``` ### Upgrade existing ```text I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run. ``` ## Machine-readable fields ```json { "schemaVersion": "1.0", "item": { "slug": "arc-compliance-checker", "name": "Compliance Checker", "source": "tencent", "type": "skill", "category": "安全合规", "sourceUrl": "https://clawhub.ai/Trypto1019/arc-compliance-checker", "canonicalUrl": "https://clawhub.ai/Trypto1019/arc-compliance-checker", "targetPlatform": "OpenClaw" }, "install": { "downloadUrl": "/downloads/arc-compliance-checker", "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=arc-compliance-checker", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "packageFormat": "ZIP package", "primaryDoc": "SKILL.md", "includedAssets": [ "SKILL.md", "scripts/checker.py" ], "downloadMode": "redirect", "sourceHealth": { "source": "tencent", "status": "healthy", "reason": "direct_download_ok", "recommendedAction": "download", "checkedAt": "2026-04-23T16:43:11.935Z", "expiresAt": "2026-04-30T16:43:11.935Z", "httpStatus": 200, "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=4claw-imageboard", "contentType": "application/zip", "probeMethod": "head", "details": { "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=4claw-imageboard", "contentDisposition": "attachment; filename=\"4claw-imageboard-1.0.1.zip\"", "redirectLocation": null, "bodySnippet": null }, "scope": "source", "summary": "Source download looks usable.", "detail": "Yavira can redirect you to the upstream package for this source.", "primaryActionLabel": "Download for OpenClaw", "primaryActionHref": "/downloads/arc-compliance-checker" }, "validation": { "installChecklist": [ "Use the Yavira download entry.", "Review SKILL.md after the package is downloaded.", "Confirm the extracted package contains the expected setup assets." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] } }, "links": { "detailUrl": "https://openagent3.xyz/skills/arc-compliance-checker", "downloadUrl": "https://openagent3.xyz/downloads/arc-compliance-checker", "agentUrl": "https://openagent3.xyz/skills/arc-compliance-checker/agent", "manifestUrl": "https://openagent3.xyz/skills/arc-compliance-checker/agent.json", "briefUrl": "https://openagent3.xyz/skills/arc-compliance-checker/agent.md" } } ``` ## Documentation ### Compliance Checker Assess OpenClaw skills against defined security policies. Track compliance posture across your skill inventory with framework-mapped findings and remediation tracking. ### Why This Exists Security scanners find vulnerabilities. Trust verifiers check provenance. But neither answers: "Does this skill meet our security policy?" Compliance Checker bridges the gap — define what "compliant" means for your environment, then assess every skill against those rules. ### Define a policy python3 {baseDir}/scripts/checker.py policy create --name "production" --description "Production deployment requirements" ### Add rules to the policy python3 {baseDir}/scripts/checker.py policy add-rule --policy "production" \\ --rule "no-critical-findings" \\ --description "No CRITICAL findings from skill scanner" \\ --severity critical python3 {baseDir}/scripts/checker.py policy add-rule --policy "production" \\ --rule "trust-verified" \\ --description "Must have VERIFIED or TRUSTED trust level" \\ --severity high python3 {baseDir}/scripts/checker.py policy add-rule --policy "production" \\ --rule "no-network-calls" \\ --description "No unauthorized network calls in scripts" \\ --severity high python3 {baseDir}/scripts/checker.py policy add-rule --policy "production" \\ --rule "no-shell-exec" \\ --description "No shell=True or subprocess calls" \\ --severity medium python3 {baseDir}/scripts/checker.py policy add-rule --policy "production" \\ --rule "has-checksum" \\ --description "Must have SHA-256 checksums for all scripts" \\ --severity medium ### Assess a skill against a policy python3 {baseDir}/scripts/checker.py assess --skill "arc-budget-tracker" --policy "production" ### Assess all installed skills python3 {baseDir}/scripts/checker.py assess-all --policy "production" ### View compliance status python3 {baseDir}/scripts/checker.py status --policy "production" ### Generate compliance report python3 {baseDir}/scripts/checker.py report --policy "production" --format json python3 {baseDir}/scripts/checker.py report --policy "production" --format text ### Built-in Rules The following rules are available out of the box: RuleWhat it checksFramework mappingno-critical-findingsNo CRITICAL findings from scannerCIS Control 16, OWASP A06no-high-findingsNo HIGH findings from scannerCIS Control 16, OWASP A06trust-verifiedTrust level is VERIFIED or TRUSTEDCIS Control 2no-network-callsNo unauthorized network requestsCIS Control 9, OWASP A10no-shell-execNo shell execution patternsCIS Control 2, OWASP A03no-eval-execNo eval/exec patternsOWASP A03has-checksumSHA-256 checksums for all filesCIS Control 2no-env-accessNo environment variable accessCIS Control 3no-data-exfilNo data exfiltration patternsCIS Control 3, CIS Control 13version-pinnedAll dependencies version-pinnedCIS Control 2 ### Compliance Status Each skill-policy assessment produces one of: COMPLIANT — Passes all rules in the policy NON-COMPLIANT — Fails one or more rules EXEMPTED — Has approved exemptions for all failures UNKNOWN — Not yet assessed ### Exemptions Sometimes a skill legitimately needs to violate a rule (e.g., a network monitoring skill needs network access). Record exemptions with justification: python3 {baseDir}/scripts/checker.py exempt --skill "arc-skill-scanner" \\ --rule "no-network-calls" \\ --reason "Scanner needs network access to check URLs against blocklists" \\ --approved-by "arc" ### Remediation Tracking When a skill fails compliance, track the fix: python3 {baseDir}/scripts/checker.py remediate --skill "some-skill" \\ --rule "no-shell-exec" \\ --action "Replaced subprocess.call with safer alternative" \\ --status fixed ### Storage Compliance data is stored in ~/.openclaw/compliance/: policies/ — Policy definitions (JSON) assessments/ — Assessment results per skill (JSON) exemptions/ — Approved exemptions (JSON) remediations/ — Remediation tracking (JSON) ### Integration Compliance Checker reads output from: arc-skill-scanner — vulnerability findings arc-trust-verifier — trust levels and attestations Run a full pipeline: # Scan → verify trust → assess compliance python3 {baseDir}/scripts/checker.py pipeline --skill "some-skill" --policy "production" ## Trust - Source: tencent - Verification: Indexed source record - Publisher: Trypto1019 - Version: 1.1.0 ## Source health - Status: healthy - Source download looks usable. - Yavira can redirect you to the upstream package for this source. - Health scope: source - Reason: direct_download_ok - Checked at: 2026-04-23T16:43:11.935Z - Expires at: 2026-04-30T16:43:11.935Z - Recommended action: Download for OpenClaw ## Links - [Detail page](https://openagent3.xyz/skills/arc-compliance-checker) - [Send to Agent page](https://openagent3.xyz/skills/arc-compliance-checker/agent) - [JSON manifest](https://openagent3.xyz/skills/arc-compliance-checker/agent.json) - [Markdown brief](https://openagent3.xyz/skills/arc-compliance-checker/agent.md) - [Download page](https://openagent3.xyz/downloads/arc-compliance-checker)