How do I install the Aoi Openclaw Security Toolkit Core skill?

Run npx skillmds@latest add modbender/aoi-openclaw-security-toolkit-core in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Aoi Openclaw Security Toolkit Core safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Aoi Openclaw Security Toolkit Core?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Aoi Openclaw Security Toolkit Core free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Aoi Openclaw Security Toolkit Core?

modbender (@modbender) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Aoi Openclaw Security Toolkit Core by modbender

Name: Aoi Openclaw Security Toolkit Core
Rating: 4.666666666666667 (3 reviews)
Author: modbender

Aoi Openclaw Security Toolkit Core

Fail-closed OpenClaw security toolkit (public-safe). Use to prevent accidental or unexpected data leakage by running local-only checks: default-deny allowlists, lightweight secret/token scans, egress-risk pattern scans, and prompt/document injection pattern scans. Use when preparing GitHub/ClawHub publishing, reviewing skills/scripts for risky behavior, or validating inbound text/doc content before tool execution.

modbender Updated Sep 9, 2026 12 repo stars

File contents

AOI OpenClaw Security Toolkit (Core)

Why: Prevent “one bad commit” incidents (accidental file leakage + secret exposure) with a fast, local-only, fail-closed check. When: Before committing/pushing, before publishing a skill, and when reviewing scripts/skills for unexpected egress behavior. How: Run a single command to get PASS/WARN/BLOCK and an optional redaction-safe report. Scope: Detection + reporting only (no auto-fix, no uploads, no auto-posting). Quickstart: openclaw-sec check --preset repo --diff staged

This is a public-safe toolkit skill.

Does: detect + report risks (PASS/WARN/BLOCK)
Does NOT: auto-fix, auto-upload, auto-post, or exfiltrate data

CLI

Binary: openclaw-sec

Common:

openclaw-sec check --lang en
openclaw-sec check --lang ko
openclaw-sec scan-secrets
openclaw-sec scan-egress
openclaw-sec scan-prompt --file inbound.txt

Exit codes:

0 PASS
1 WARN
2 BLOCK

Default scan scope

If --paths is omitted, it scans existing paths among:

.
skills/
scripts/
context/

Rules

Rule files live in rules/:

secret_patterns.txt
egress_patterns.txt
prompt_injection_patterns.txt

Edit these to tune sensitivity.

Frequently asked questions