Agents can sign plugins, rotate credentials without losing identity, and publicly attest to behavior.
中文简介正在准备中。当前显示原文说明。
johnalbertini14-glitch/openclaw-skills22026年2月26日 更新
免费在 GitHub 公开
security-guardian
Automated security auditing for OpenClaw projects. Scans for hardcoded secrets (API keys, tokens) and container vulnerabilities (CVEs) using Trivy. Provides structured reports to help maintain a clean and secure codebase.
中文简介正在准备中。当前显示原文说明。
查看安装方法包含的文件（4）
- SKILL.md1.8 KB
- _meta.json289 B
- scripts/scan_container.sh390 B
- scripts/scan_secrets.py2.5 KB
SKILL.md（原文）
安装前可以查看交给 AI 代理的指令内容。
Security Guardian
System for automated security auditing and credential protection.
Core Workflows
1. Secret Scanning
Scan specific project directories for hardcoded credentials.
- Tool:
scripts/scan_secrets.py - Usage:
python3 $WORKSPACE/skills/security-guardian/scripts/scan_secrets.py <path_to_project> - Workflow:
- Execute scan on a specific project or directory.
- If findings are reported (exit code 1):
- Review the file and line number.
- Transition: Move the secret to a secure vault (e.g., using the
mema-vaultskill). - Redact: Replace the plaintext secret in the source code with an environment variable or a vault lookup call.
2. Container Vulnerability Scan
Analyze Docker images for vulnerabilities prior to deployment.
- Tool:
scripts/scan_container.sh - Usage:
bash $WORKSPACE/skills/security-guardian/scripts/scan_container.sh <image_name> - Logic: Identify
HIGHandCRITICALseverities. Recommend base image updates or security patches.
Security Guardrails
- Scope Limitation: Avoid scanning system-level directories. Focus only on relevant project workspaces.
- Credential Isolation: Hardcoded secrets are considered a high-severity finding.
- Dependencies: Container scanning requires
trivyto be installed on the host system.
Integration
- Vaulting: This skill identifies leaks. Remediation should be performed using a dedicated credential manager like
mema-vault.
评价
还没有评价。欢迎分享你的使用感受。
评论
无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
同一仓库的技能
Query historical crypto market data from 0xArchive across Hyperliquid, Lighter.xyz, and HIP-3. Covers orderbooks, trades, candles, funding rates, open interest, liquidations, and data quality. Use when the user asks about crypto market data, orderbooks, trades, funding rates, or historical prices on Hyperliquid, Lighter.xyz, or HIP-3.
中文简介正在准备中。当前显示原文说明。
johnalbertini14-glitch/openclaw-skills22026年2月26日 更新
Calculate ROI for AI-as-a-Service (managed AI agents). Estimates cost savings, efficiency gains, and payback period for deploying AI agents across business operations. Use when evaluating whether managed AI agents make financial sense for a company.
中文简介正在准备中。当前显示原文说明。
johnalbertini14-glitch/openclaw-skills22026年2月26日 更新
Design, build, deploy, and operate production AI agent systems — single agents, multi-agent teams, and autonomous swarms. Complete methodology from agent architecture through orchestration, memory systems, safety guardrails, and operational excellence.
中文简介正在准备中。当前显示原文说明。
johnalbertini14-glitch/openclaw-skills22026年2月26日 更新
Design, build, test, document, and secure production-grade APIs. Covers the full lifecycle from schema design through deployment, monitoring, and versioning. Use when designing new APIs, reviewing existing ones, generating OpenAPI specs, building test suites, or debugging production issues.
中文简介正在准备中。当前显示原文说明。
johnalbertini14-glitch/openclaw-skills22026年2月26日 更新
Turn your AI agent into a business automation architect. Design, document, implement, and monitor automated workflows across sales, ops, finance, HR, and support — no n8n or Zapier required.
中文简介正在准备中。当前显示原文说明。
johnalbertini14-glitch/openclaw-skills22026年2月26日 更新