# Send soul-guardian to your agent Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually. ## Fast path - Download the package from Yavira. - Extract it into a folder your agent can access. - Paste one of the prompts below and point your agent at the extracted folder. ## Suggested prompts ### New install ```text I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Then review README.md for any prerequisites, environment setup, or post-install checks. Tell me what you changed and call out any manual steps you could not complete. ``` ### Upgrade existing ```text I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Then review README.md for any prerequisites, environment setup, or post-install checks. Summarize what changed and any follow-up checks I should run. ``` ## Machine-readable fields ```json { "schemaVersion": "1.0", "item": { "slug": "soul-guardian", "name": "soul-guardian", "source": "tencent", "type": "skill", "category": "效率提升", "sourceUrl": "https://clawhub.ai/davida-ps/soul-guardian", "canonicalUrl": "https://clawhub.ai/davida-ps/soul-guardian", "targetPlatform": "OpenClaw" }, "install": { "downloadUrl": "/downloads/soul-guardian", "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=soul-guardian", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "packageFormat": "ZIP package", "primaryDoc": "SKILL.md", "includedAssets": [ "README.md", "SKILL.md", "scripts/install_launchd_plist.py", "scripts/onboard_state_dir.py", "scripts/soul_guardian.py", "scripts/test_soul_guardian.py" ], "downloadMode": "redirect", "sourceHealth": { "source": "tencent", "status": "healthy", "reason": "direct_download_ok", "recommendedAction": "download", "checkedAt": "2026-04-30T16:55:25.780Z", "expiresAt": "2026-05-07T16:55:25.780Z", "httpStatus": 200, "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=network", "contentType": "application/zip", "probeMethod": "head", "details": { "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=network", "contentDisposition": "attachment; filename=\"network-1.0.0.zip\"", "redirectLocation": null, "bodySnippet": null }, "scope": "source", "summary": "Source download looks usable.", "detail": "Yavira can redirect you to the upstream package for this source.", "primaryActionLabel": "Download for OpenClaw", "primaryActionHref": "/downloads/soul-guardian" }, "validation": { "installChecklist": [ "Use the Yavira download entry.", "Review SKILL.md after the package is downloaded.", "Confirm the extracted package contains the expected setup assets." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] } }, "links": { "detailUrl": "https://openagent3.xyz/skills/soul-guardian", "downloadUrl": "https://openagent3.xyz/downloads/soul-guardian", "agentUrl": "https://openagent3.xyz/skills/soul-guardian/agent", "manifestUrl": "https://openagent3.xyz/skills/soul-guardian/agent.json", "briefUrl": "https://openagent3.xyz/skills/soul-guardian/agent.md" } } ``` ## Documentation ### soul-guardian 👻 Protects your agent's core files (SOUL.md, AGENTS.md, etc.) from unauthorized changes with automatic detection, restoration, and user alerting. ### Step 1: Initialize baselines cd ~/.openclaw/workspace python3 skills/soul-guardian/scripts/soul_guardian.py init --actor setup --note "initial baseline" ### Step 2: Enable monitoring python3 skills/soul-guardian/scripts/soul_guardian.py enable-monitoring This shows you how to add monitoring to your workflow. ### Step 3: Add to HEARTBEAT.md (Recommended) Add this to your HEARTBEAT.md for automatic monitoring: ## Soul Guardian Check - Run \`python3 skills/soul-guardian/scripts/soul_guardian.py check --actor heartbeat --output-format alert\` - If any output is produced, relay it to the user immediately as a security alert That's it! Soul Guardian will now: ✅ Detect unauthorized changes to protected files ✅ Auto-restore SOUL.md and AGENTS.md to approved baseline ✅ Alert you when drift is detected and handled ### What it protects (default policy) FileModeAction on driftSOUL.mdrestoreAuto-restore + alertAGENTS.mdrestoreAuto-restore + alertUSER.mdalertAlert onlyTOOLS.mdalertAlert onlyIDENTITY.mdalertAlert onlyHEARTBEAT.mdalertAlert onlyMEMORY.mdalertAlert onlymemory/*.mdignoreIgnored ### Check for drift (with alert output) python3 skills/soul-guardian/scripts/soul_guardian.py check --output-format alert Silent if no drift Outputs human-readable alert if drift detected Perfect for heartbeat integration ### Watch mode (continuous monitoring) python3 skills/soul-guardian/scripts/soul_guardian.py watch --interval 30 Runs continuously, checking every 30 seconds. ### Approve intentional changes python3 skills/soul-guardian/scripts/soul_guardian.py approve --file SOUL.md --actor user --note "intentional update" ### View status python3 skills/soul-guardian/scripts/soul_guardian.py status ### Verify audit log integrity python3 skills/soul-guardian/scripts/soul_guardian.py verify-audit ### Alert Format When drift is detected, the --output-format alert produces output like: ================================================== 🚨 SOUL GUARDIAN SECURITY ALERT ================================================== 📄 FILE: SOUL.md Mode: restore Status: ✅ RESTORED to approved baseline Expected hash: abc123def456... Found hash: 789xyz000111... Diff saved: /path/to/patches/drift.patch ================================================== Review changes and investigate the source of drift. If intentional, run: soul_guardian.py approve --file ================================================== This output is designed to be relayed directly to the user in TUI/chat. ### Security Model What it does: Detects filesystem drift vs approved baseline (sha256) Produces unified diffs for review Maintains tamper-evident audit log with hash chaining Refuses to operate on symlinks Uses atomic writes for restores What it doesn't do: Cannot prove WHO made a change (actor is best-effort metadata) Cannot protect if attacker controls both workspace AND state directory Is not a substitute for backups Recommendation: Store state directory outside workspace for better resilience. ### Demo Run the full demo flow to see soul-guardian in action: bash skills/soul-guardian/scripts/demo.sh This will: Verify clean state (silent check) Inject malicious content into SOUL.md Run heartbeat check (produces alert) Show SOUL.md was restored ### Troubleshooting "Not initialized" error: Run init first to set up baselines. Drift keeps happening: Check what's modifying your files. Review the audit log and patches. Want to approve a change: Run approve --file after reviewing the change. ## Trust - Source: tencent - Verification: Indexed source record - Publisher: davida-ps - Version: 0.0.2 ## Source health - Status: healthy - Source download looks usable. - Yavira can redirect you to the upstream package for this source. - Health scope: source - Reason: direct_download_ok - Checked at: 2026-04-30T16:55:25.780Z - Expires at: 2026-05-07T16:55:25.780Z - Recommended action: Download for OpenClaw ## Links - [Detail page](https://openagent3.xyz/skills/soul-guardian) - [Send to Agent page](https://openagent3.xyz/skills/soul-guardian/agent) - [JSON manifest](https://openagent3.xyz/skills/soul-guardian/agent.json) - [Markdown brief](https://openagent3.xyz/skills/soul-guardian/agent.md) - [Download page](https://openagent3.xyz/downloads/soul-guardian)