tool-governance工具使用安全与可靠性。当工具反复失败、agent 绕过权限否决、或需要破坏性操作保护时使用。
Install via ClawdBot CLI:
clawdbot install lanyasheng/tool-governanceGrade Limited — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdPotentially destructive shell commands in tool definitions
rm -rf /Calls external URL not in known-safe list
https://evil.com/script.shAudited Apr 17, 2026 · audit v1.0
Generated Apr 15, 2026
In a DevOps environment, this skill monitors tool failures in CI/CD pipelines, such as deployment script errors or permission denials, to prevent infinite retry loops and enforce safe rollbacks for destructive commands like database migrations or infrastructure changes. It ensures pipeline reliability by escalating issues after repeated failures and creating checkpoints before risky operations.
For financial institutions using AI agents for data analysis or transaction processing, this skill validates tool inputs to prevent execution of dangerous commands (e.g., unauthorized data deletion) and tracks permission denials to detect attempts to bypass security protocols. It helps maintain regulatory compliance by enforcing graduated permission rules based on risk levels.
In healthcare research labs, this skill safeguards against destructive bash commands when handling sensitive patient data or experimental scripts, using checkpoint and rollback features to recover from accidental modifications. It also monitors tool errors in data processing pipelines to avoid data corruption and ensures input validation for secure tool usage.
For e-commerce platforms automating inventory updates or order processing, this skill prevents tool retry deadlocks from API failures and blocks dangerous commands that could disrupt live systems. It uses denial circuit breakers to stop agents from circumventing access controls, ensuring stable and secure automated workflows.
Offer this skill as part of a subscription-based platform for AI agent security, targeting enterprises that need reliable tool governance. Revenue is generated through tiered pricing based on usage volume and features like advanced monitoring or custom rule sets.
Provide consulting services to integrate this skill into existing AI systems, helping clients implement tool governance for specific use cases like compliance or risk management. Revenue comes from project-based fees and ongoing support contracts.
Release the skill as open-source under the MIT license to build a community, then monetize through premium support, training, and customization services for businesses requiring enhanced features or dedicated assistance.
💬 Integration Tip
Integrate this skill by configuring hooks in your AI agent's workflow, such as PreToolUse for input validation and PostToolUseFailure for error tracking, to automate safety checks without manual intervention.
Scored Apr 19, 2026
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
Manage and operate ClawSec Monitor v3.0, a MITM HTTP/HTTPS proxy that logs AI agent traffic, detects exfiltration and injection threats in real time.
Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them. Security audit tool that detects data exfiltration, system modification attempts, backdoors, and obfuscation techniques.
MoltGuard — OpenClaw security guard by OpenGuardrails. Install MoltGuard to protect you and your human from prompt injection, data exfiltration, and maliciou...
Safe command execution for OpenClaw Agents with automatic danger pattern detection, risk assessment, user approval workflow, and audit logging. Use when agen...
Scan ClawHub skills for security vulnerabilities BEFORE installing. Use when installing new skills from ClawHub to detect prompt injections, malware payloads, hardcoded secrets, and other threats. Wraps clawhub install with mcp-scan pre-flight checks.