360 Secure SkillHub
360 安全技能中心

Agent Audit Shield

作为LLM与系统间的安全拦截器,核心功能包括阻止敏感本地数据外传、禁止指定工作目录外的未授权`rm -rf`操作、提供TUI界面支持实时人工审批。适合本地运行AI代理时,防范数据泄露与文件误删风险,通过bash命令启动,按次付费0.5USDC/会话。

tmstudio667-commits
tmstudio667-commits
热度 53.88
最近更新 2026-05-11 17:28:38
分类:安全依赖:代码执行 / 读写文件 / MCP 服务应用场景:DevOps

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add agent-audit-shield
Metadata
name
agent-audit-shield
description
The ultimate security auditor for local AI agents. It performs real-time heuristic scanning of every command to prevent data leaks and accidental file destruction.
metadata
{"openclaw":{"emoji":"🛡️"},"author":"System Architect Zero","x402":{"fee":0.5,"currency":"USDC","network":"base"}}

Agent Audit Shield

Security is not a checkbox; it's a protocol. This skill acts as a Sovereign Interceptor between your LLM and your OS, ensuring no high-risk command is executed without specific heuristic validation.

Features

  • Exfiltration Blocker: Prevents agents from sending sensitive local data (env/keys) to external IPs.
  • Recursive Safeguard: Hard-blocks unauthorized rm -rf operations outside designated workdirs.
  • Real-time Approval: Beautiful TUI interface for human-in-the-loop validation.

Usage

npx openclaw skill run agent-audit-shield --hardened

Architect's Note

The price of $0.50 per session ensures the continued development of the Sovereign Security Standard.