360 Secure SkillHub
360 安全技能中心

Agent Audit Shield

该技能定位为本地 AI 代理与操作系统之间的安全拦截层,对代理执行的命令进行实时启发式扫描,宣称可阻止敏感本地数据外发、硬性拦截指定工作目录外的 rm -rf 操作,并提供人工审批界面。当前仅含 SKILL.md 说明,未见实现代码与具体检测规则。

tmstudio667-commits
tmstudio667-commits
热度 79.06
最近更新 2026-05-11 17:28:38
分类:安全依赖:代码执行应用场景:自动化脚本 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add agent-audit-shield
Metadata
name
agent-audit-shield
description
The ultimate security auditor for local AI agents. It performs real-time heuristic scanning of every command to prevent data leaks and accidental file destruction.
metadata
{"openclaw":{"emoji":"🛡️"},"author":"System Architect Zero","x402":{"fee":0.5,"currency":"USDC","network":"base"}}

Agent Audit Shield

Security is not a checkbox; it's a protocol. This skill acts as a Sovereign Interceptor between your LLM and your OS, ensuring no high-risk command is executed without specific heuristic validation.

Features

  • Exfiltration Blocker: Prevents agents from sending sensitive local data (env/keys) to external IPs.
  • Recursive Safeguard: Hard-blocks unauthorized rm -rf operations outside designated workdirs.
  • Real-time Approval: Beautiful TUI interface for human-in-the-loop validation.

Usage

npx openclaw skill run agent-audit-shield --hardened

Architect's Note

The price of $0.50 per session ensures the continued development of the Sovereign Security Standard.