Guardian Core

Guardian Core 是本地优先的安全扫描工具，内置提示注入、社工与工具滥用等签名定义，可对消息做实时预扫描、对工作区文件做批量扫描，结果写入本地 SQLite，并通过本地仪表盘与报告呈现；运行依赖 python3，不联网。

bluemax30001

热度 23.86

最近更新 2026-05-20 03:37:01

分类：安全依赖：代码执行 / 读写文件应用场景：工作流 / 报告撰写

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add guardian-core

Metadata

name: guardian-core
description: Local Guardian scanner with bundled signatures and dashboard. Realtime + batch scanning with local-only operation.
version: 1.0.8
metadata: {"openclaw":{"requires":{"bins":["python3"],"env":["GUARDIAN_WORKSPACE","GUARDIAN_CONFIG"]},"permissions":["read_workspace","write_workspace"]}}

Guardian Core

Guardian Core is the minimal, local-first scanner package.

Included

Realtime pre-scan
Batch scan/report
Bundled signature definitions
Local SQLite logging (guardian.db)
Local dashboard files

Install

cd ~/.openclaw/skills/guardian-core
./install.sh

Scan scope (default)

By default, Guardian Core auto-discovers scan targets and may scan:

~/.openclaw/agents
~/.openclaw/cron

This is expected for a workspace security scanner, but it means files in those paths (including other skill/config files) may be read for threat detection. You can narrow scope via scan_paths in config.json.

What install.sh does

install.sh performs local checks only:

verifies Python version
validates bundled signature definitions
prints local verification commands

It does not download remote packages, install external dependencies, configure cron/system services, or start network listeners.

Verify

python3 scripts/admin.py status
python3 scripts/admin.py threats
python3 scripts/admin.py report

Environment/config reads

GUARDIAN_WORKSPACE
GUARDIAN_CONFIG

Python API

from core.realtime import RealtimeGuard

guard = RealtimeGuard()
result = guard.scan_message(user_text, channel="telegram")
if guard.should_block(result):
    return guard.format_block_response(result)

Signature-content note

Guardian Core ships detection signatures for adversarial prompt patterns. These signature strings are detection data only, not runtime agent instructions. Guardian Core does not include any directive that changes agent identity, overrides system behavior, or asks the model to ignore safeguards.