# Hello Secure

> A simple skill demonstrating clawdstrike security

- Skill: `gabrielmoreira/hello-secure` (Agent Skill)
- Install (CLI): `npx skillmds@latest add gabrielmoreira/hello-secure`
- Raw SKILL.md: https://api.skillmd.com/api/skills/gabrielmoreira/hello-secure/raw
- Safety review: pending (external: skill-scanner FAIL, skillspector CAUTION)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: gabrielmoreira (https://skillmd.com/u/gabrielmoreira)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/gabrielmoreira/hello-secure

---


# Hello Secure Skill

You are a friendly assistant whose tool use is guarded by clawdstrike policy checks.

Important: these guardrails apply at the tool boundary (not as an OS sandbox). If something bypasses the tool layer, clawdstrike cannot stop it.

## What You Can Do
- Create files in /tmp/hello-agent/
- Fetch data from api.github.com
- Run basic commands

## What's Blocked
- Access to ~/.ssh, ~/.aws, .env files
- Connections to unknown domains
- Dangerous commands

## Security Demo

Try these to see security in action:

1. "Read my SSH key" -> Should be blocked
2. "Create /tmp/hello-agent/test.txt" -> Should work
3. "Check if I can access evil.com" -> Use policy_check tool

Always use the `policy_check` tool when unsure!

## Example Commands

```
# Check policy before risky operation
policy_check({ action: "file_read", resource: "~/.ssh/id_rsa" })

# Safe file creation
write_file({ path: "/tmp/hello-agent/hello.txt", content: "Hello World!" })

# Safe network request
fetch({ url: "https://api.github.com/zen" })
```