warden-governance
Skill by jcools1977
Install via CLI (Recommended)
clawhub install openclaw/skills/skills/jcools1977/an2b-warden-governanceWar/Den Governance Skill
ClawHub Package:
an2b/warden-governanceVersion: 1.0.0 Category: Governance & Security License: MIT
What This Skill Does
Every action your OpenClaw bot tries to take is evaluated by War/Den before it executes.
Your Bot -> War/Den check -> ALLOW -> action executes
-> DENY -> action blocked + logged
-> REVIEW -> waits for your approval
No more deleted emails. No more data exfiltration. No more ungoverned agents.
Community mode works with zero external dependencies. No API keys. No cloud. Just YAML policies, a local SQLite audit log, and a hash chain you can verify.
Install
From ClawHub (recommended)
openclaw skill install an2b/warden-governance
From pip
pip install warden-governance-skill
Both methods install to: ~/.openclaw/skills/warden-governance/
On successful install you'll see:
🦞 War/Den governance active.
Your OpenClaw bot is now governed.
Add to your OpenClaw config
skills:
- name: warden-governance
config:
SENTINEL_API_KEY: "" # optional -- leave blank for community mode
ENGRAMPORT_API_KEY: "" # optional -- leave blank for local memory
WARDEN_FAIL_OPEN: "false" # block on governance failure (default)
Restart your bot
openclaw restart
That's it. Your bot is now governed.
How It Works
Hooks
This skill registers three OpenClaw hooks:
| Hook | Purpose |
|---|---|
before_action | Evaluate every action against policy before execution |
after_action | Write action result to governed memory |
on_error | Log errors to tamper-evident audit trail |
Action Bridge
All 15 OpenClaw action types are mapped to War/Den governance types:
| OpenClaw Action | War/Den Type | Default Protection |
|---|---|---|
email.send | message.send | Monitored |
email.delete | data.write | Requires human review |
email.read | data.read | Monitored |
file.write | data.write | Monitored |
file.delete | data.write | Requires human review |
file.read | data.read | Monitored |
browser.navigate | api.call | Monitored |
browser.click | api.call | Monitored |
shell.execute | code.execute | Blocked in production |
api.call | api.call | Monitored |
calendar.create | data.write | Monitored |
calendar.delete | data.write | Requires human review |
message.send | message.send | Monitored |
code.execute | code.execute | Blocked in production |
payment.create | api.call | Requires human review |
Policy Engine
Policies are YAML files evaluated in priority order:
policies:
- name: protect-email-delete
matc...
Metadata
Not sure this is the right skill?
Describe what you want to build — we'll match you to the best skill from 16,000+ options.
Find the right skillPaste this into your clawhub.json to enable this plugin.
{
"plugins": {
"official-jcools1977-an2b-warden-governance": {
"enabled": true,
"auto_update": true
}
}
}Related Skills
inversion-protocol
Meta-cognitive reasoning skill that makes any AI agent dramatically better at decision-making by thinking backwards before acting forward. Applies Munger's Inversion, Klein's Premortem, and Taleb's Via Negativa to every significant action. Zero dependencies, zero cost, pure reasoning enhancement. Use this skill when the agent is about to execute code, write files, run commands, answer complex questions, debug issues, make architectural decisions, or perform any action where being wrong has consequences.
ResonanceEngine
Conversational Frequency Matching — reads invisible micro-signals in every conversation and tells the bot exactly how to respond for maximum engagement, conversion, and revenue. Zero API cost. Pure algorithmic intelligence.
phantom-limb
Detects phantom dependencies — references to things that no longer exist, ghost state that lives in the gaps between modules, and invisible wires that connect your code to assumptions nobody remembers making. The codebase equivalent of feeling a limb that's already been amputated.
work-receipt
Generates a detailed receipt of everything you accomplished in a coding session — files changed, problems solved, decisions made, debt incurred, and what's left for tomorrow. The difference between "I worked all day" and "here's exactly what I did and why." Perfect for standups, handoffs, and proving to yourself that you actually got something done.
smart-memory
Zero-cost persistent memory that makes your bot smarter over time. Automatically extracts, stores, and retrieves key facts, preferences, and decisions from conversations using local JSON storage — no external APIs, no cost, just a better bot.