skill-safe-install-l0-strict

What This Skill Does

The skill-safe-install-l0-strict is a specialized, high-security governance agent designed for OpenClaw users who require a rigorous, auditable, and conservative installation pipeline. Unlike standard installation flows, this skill enforces a mandatory six-step verification process, ensuring that every third-party skill undergoes deep inspection, sandbox testing, and explicit risk-assessment before it is ever allowed to touch your local system files. By stripping away author-based trust bypasses, this skill ensures that no code is executed blindly, protecting your environment from malicious or poorly maintained software. It is the gold standard for security-conscious developers and power users.

Installation

To install this security governance skill, execute the following command in your OpenClaw terminal:

clawhub install openclaw/skills/skills/1231qaz2wsx/skill-safe-install-l0-strict

Once installed, this skill will act as your primary gatekeeper for all subsequent clawhub activity involving new software.

Use Cases

1. High-Risk Environments: Use this when working in production environments where unauthorized software installation could lead to system instability or data leakage.
2. Third-Party Audit: Employ the skill to run pre-install security audits on unknown community-contributed skills that lack established reputations.
3. Compliance Requirements: Use this to enforce strict organizational policies that require documented evidence of risk assessment for every piece of software added to a machine.

Example Prompts

1. "I want to install the 'gpt-auto-refactor' skill, but I need you to perform a full L0 strict security audit first to see what permissions it requires."
2. "Before I add this new utility plugin, please run the skill-safe-install-l0-strict process to inspect its network access and persistent config behavior."
3. "Is the 'data-scraper-v2' safe to install? Please perform a sandbox verification and provide me with a risk assessment report before finalizing the install."

Tips & Limitations

• Tip: Always review the 'Risk Rating' provided in Step 2. If the skill is rated as 'CRITICAL', manually verify the source code, as the skill will default to a halt state.
• Tip: Keep your ~/.openclaw/openclaw.json backed up, as this skill performs strict management of your trust configuration.
• Limitation: This skill adds a time overhead to every installation. It is not designed for rapid prototyping or quick iteration cycles; it is designed for maximum safety. It cannot force a malicious skill to be 'safe', it only identifies and prevents the risk from entering your system silently.