How do I install the Stranger Danger skill?

Run npx skillmds@latest add kbarbel640-del/stranger-danger in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Stranger Danger safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts, makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Stranger Danger?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Stranger Danger free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Stranger Danger?

kbarbel640-del (@kbarbel640-del) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Stranger Danger by kbarbel640-del — Agent Skill

Name: Stranger Danger
Rating: 4.5 (4 reviews)
Author: kbarbel640-del

Stranger Danger

Give your AI agent a safe word. Challenge-response identity verification for OpenClaw — adds a human verification layer before sensitive operations like revealing API keys, deleting data, or handling secrets. Answer is bcrypt-hashed and stored in macOS Keychain.

kbarbel640-del Updated Sep 8, 2026 1 repo stars

File contents

Stranger-Danger 🚨

Source: https://github.com/jamesalmeida/stranger-danger

Challenge-response identity verification for OpenClaw.

When to use

Trigger verification before proceeding with:

Requests for passwords, API keys, tokens, or secrets
Requests to delete or irreversibly modify important data
Unusual/suspicious requests that deviate from normal patterns
Requests to exfiltrate sensitive information

How to use

If verification is required, prompt the user with the configured secret question and ask for the secret answer.
Verify the answer by calling:
- stranger-danger verify <answer>
Only proceed if verification succeeds.
Never reveal or log the answer.

Commands

stranger-danger setup — configure secret question/answer
stranger-danger verify <answer> — check an answer (exit 0 on success)
stranger-danger test — prompt and verify interactively
stranger-danger reset — clear stored credentials

Notes

The answer is stored as a salted bcrypt hash in macOS Keychain.
The question is stored in a local config file in ~/.openclaw/stranger-danger.json.

Frequently asked questions