360 Secure SkillHub
360 安全技能中心

Agent Bootstrap Hardening

面向 OpenClaw 工作区核心文件(AGENTS.md、SOUL.md、USER.md、HEARTBEAT.md、MEMORY.md 及每日记忆文件),先盘点现状、按 references/rubric.md 快速评分,再以小范围改动收紧安全边界与审批规则、精简冗余说明,可按需补充 RESOLVER.md 与 QUALITY.md,最后返回加固摘要、变更文件列表与下一步建议。

cwheeler67
cwheeler67
热度 39.74
最近更新 2026-05-11 17:43:29
分类:安全依赖:读写文件应用场景:工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add agent-bootstrap-hardening
Metadata
name
agent-bootstrap-hardening
description
Audit and harden an OpenClaw workspace setup (AGENTS/SOUL/USER/HEARTBEAT/memory) with concise, enforceable rules, safety boundaries, and low-bloat instruction design. Use when users ask to optimize, clean up, or harden their agent brain files.

Agent Bootstrap Hardening

Use this skill when a user wants to improve core workspace files for better reliability, speed, and safety.

Scope

Target files (if present):

  • AGENTS.md
  • SOUL.md
  • USER.md
  • HEARTBEAT.md
  • MEMORY.md
  • memory/YYYY-MM-DD.md
  • optional helper docs: RESOLVER.md, QUALITY.md

Workflow

  1. Inventory current files and obvious gaps.
  2. Score each file quickly with the rubric in references/rubric.md.
  3. Harden content with minimal edits:
    • keep instructions concise and operational
    • tighten safety boundaries and approval rules
    • reduce duplicated or theory-heavy text
    • preserve user tone/persona intent
  4. Add missing primitives when useful:
    • RESOLVER.md for execution routing
    • QUALITY.md for lightweight pre-send checks
  5. Return summary:
    • what changed
    • why it improved behavior
    • remaining risks/todos

Editing rules

  • Prefer small, targeted diffs over wholesale rewrites.
  • Avoid introducing process that cannot be followed consistently.
  • Keep AGENTS and SOUL readable in one pass.
  • Preserve explicit user preferences and platform-specific norms.

Guardrails

  • Never weaken privacy or approval boundaries.
  • Never add hidden/external exfil behavior.
  • Do not claim setup is “secure” without caveats.
  • If uncertain about impact, ask before applying broad policy changes.

Output contract

Provide:

  • Hardening summary (3–8 bullets)
  • Files changed list
  • Next recommended step (single highest-leverage follow-up)