runtime-attestation-probe
Helps validate that agent behavior at runtime matches the capabilities and constraints declared in its attestation. Detects divergence between what an agent claims to do and what it actually does during execution, catching the class of attacks that passes static analysis but activates conditionally at runtime.
Install via CLI (Recommended)
clawhub install openclaw/skills/skills/andyxinweiminicloud/runtime-attestation-probeWhat This Skill Does
The runtime-attestation-probe is a critical security utility for OpenClaw agents, designed to bridge the gap between static code analysis and live execution. While static analysis tools evaluate the intent declared in a skill's manifest, they often fail to catch conditional logic or environment-specific payloads. This skill acts as an active observer, instrumenting the execution of an agent to ensure that its real-world behavior aligns with its documented capabilities and constraints. It acts as a safety layer that monitors for unauthorized network requests, hidden file system access, or unexpected side effects that only manifest under specific production conditions, effectively stopping 'time-bomb' or 'environment-aware' malicious code before it can compromise your environment.
Installation
To integrate this probe into your development lifecycle, use the OpenClaw command-line interface:
clawhub install openclaw/skills/skills/andyxinweiminicloud/runtime-attestation-probe
Use Cases
- Security Auditing: Validate third-party skills before integrating them into production agents to ensure they don't reach out to hidden telemetry endpoints.
- Compliance Monitoring: Verify that data handling policies remain intact, ensuring sensitive data doesn't exit the defined sandbox.
- Regression Testing for Security: Run the probe during CI/CD to ensure that updates to an agent's code haven't introduced unauthorized side effects or expanded capability boundaries.
- Incident Response: When a skill exhibits suspicious behavior, use this probe to capture a comprehensive trace and compare it against the expected attestation to isolate the deviation.
Example Prompts
- "Run runtime-attestation-probe on the 'image-processor' skill using the production environment profile to identify any undeclared external API calls."
- "Compare the runtime execution trace of 'data-scraper' against its provided attestation document and report all capability boundary violations."
- "Audit the 'file-manager' skill for conditional activation flags and list all environmental variables that trigger unique execution paths."
Tips & Limitations
- Environment Parity: For the best results, ensure your test environment mimics production as closely as possible, as the probe is designed to catch environment-triggered payloads.
- Performance Overhead: Instrumenting execution introduces minor latency. Use this tool primarily in sandbox or staging environments rather than high-throughput production loops.
- Scope: The probe monitors behavior within the scope defined by the attestation. If an attestation is missing or incomplete, the probe cannot effectively determine what constitutes a violation. Ensure all skills have comprehensive manifests before deployment.
Metadata
Not sure this is the right skill?
Describe what you want to build — we'll match you to the best skill from 16,000+ options.
Find the right skillPaste this into your clawhub.json to enable this plugin.
{
"plugins": {
"official-andyxinweiminicloud-runtime-attestation-probe": {
"enabled": true,
"auto_update": true
}
}
}Tags(AI)
Flags: code-execution
Related Skills
skill-update-delta-monitor
Helps detect security-relevant changes in AI skills after installation. Tracks deltas between the audited version and current version, flagging updates that expand permissions, add new network endpoints, or alter behavior in ways that bypass install-time security checks.
delta-disclosure-auditor
Helps verify that skill updates publish an auditable record of what changed — catching the gap between "the registry shows the new version" and "anyone can see what the new version changed relative to the old one." v1.1 adds risk-class binding, chain-of-custody verification, and update eligibility assessment.
capability-composition-analyzer
Helps identify dangerous capability combinations that emerge when agent skills are composed — catching the class of risk where no individual skill is harmful but their intersection creates an exfiltration or compromise path.
transparency-log-auditor
Helps verify that skill signing events are recorded in an independently auditable transparency log — catching the class of trust failures where a registry operator can silently rewrite history without detection.
observer-effect-probe
Helps detect skills that behave differently when they sense they are being monitored — catching the class of evasion where conditional activation logic specifically targets attestation and sandbox environments.