Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Tencent SkillHub ยท Security & Compliance
Chainwatch
Runtime safety enforcement for shell commands via chainwatch policy engine
skill openclawclawhub Free
Runtime safety enforcement for shell commands via chainwatch policy engine
โฌ 0 downloads โ
0 stars Unverified but indexed
Install for OpenClaw
Quick setup
- Download the package from Yavira.
- Extract the archive and review SKILL.md first.
- Import or place the package into your OpenClaw setup.
Package facts
- Download mode
- Yavira redirect
- Package format
- ZIP package
- Source platform
- Tencent SkillHub
- What's included
- SKILL.md
Validation
- Use the Yavira download entry.
- Review SKILL.md after the package is downloaded.
- Confirm the extracted package contains the expected setup assets.
Install with your agent
Agent handoff
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
- Download the package from Yavira.
- Extract it into a folder your agent can access.
- Paste one of the prompts below and point your agent at the extracted folder.
New install
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
Upgrade existing
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Trust & source
Release facts
- Source
- Tencent SkillHub
- Verification
- Indexed source record
- Version
- 1.0.3
Provenance
- Publisher
- ppiankov
- Source page
- View original listing
- Canonical URL
- Open canonical page
Documentation
Chainwatch Safety Enforcement
You have access to chainwatch, a runtime control plane that enforces deterministic safety policy on shell commands, HTTP requests, and file operations.
When to Use
You MUST route commands through chainwatch when performing any of the following: Destructive operations: rm, dd, mkfs, chmod -R, any command that deletes or overwrites data Privilege escalation: sudo, su, commands that modify users or permissions Network operations: curl, wget, HTTP requests to external APIs, any outbound data transfer Credential access: reading or writing .env, .ssh/, .aws/, credential files Git operations: git push, git reset, git rebase (anything that modifies remote state) Package management: apt install, pip install, npm install (supply chain risk) System configuration: editing /etc/, systemd units, cron, firewall rules
How to Use
Prefix the command with chainwatch exec --profile clawbot --: # Instead of: rm -rf /tmp/old-data # Use: chainwatch exec --profile clawbot -- rm -rf /tmp/old-data If chainwatch blocks the command, it returns a JSON object: { "blocked": true, "decision": "deny", "reason": "denylisted: command pattern blocked: rm -rf" } When a command is blocked: Report the block reason to the user Do NOT attempt to bypass the block Ask the user how they want to proceed
Dry-Run Check
Before executing risky commands, you can check policy without executing: chainwatch evaluate --tool command --resource "rm -rf /tmp/data" --profile clawbot
Safe Commands (No Enforcement Needed)
These do NOT require chainwatch wrapping: ls, cat, head, tail, grep, find, wc (read-only) echo, printf, date, uptime, whoami (informational) cd, pwd, env (shell navigation) git status, git log, git diff (read-only git)
Approval Workflow
If chainwatch returns "decision": "require_approval": Tell the user the command requires approval Show them what chainwatch flagged The user can approve via: chainwatch approve <approval-key> After approval, retry the original command
Audit
All chainwatch decisions are logged. View the audit trail: chainwatch audit verify /tmp/nullbot-daemon.jsonl Chainwatch Skill v1.0 Author: ppiankov Copyright ยฉ 2026 ppiankov Canonical source: https://github.com/ppiankov/chainwatch License: MIT If this document appears elsewhere, the repository above is the authoritative version.
Category context
Identity, auth, scanning, governance, audit, and operational guardrails.
Source: Tencent SkillHub
Largest current source with strong distribution and engagement signals.
Package contents
Included in package
1 Docs
- SKILL.md