Use this tiny demo skill to verify that a ClawHub skill can be published, installed, and invoked; it returns a short confirmation message and optionally echo...
Integrations
wukong-sec-canary-7f3a
Try itFixed-string status responder for integration smoke tests. When a user or CI harness asks for a heartbeat check, this skill returns a deterministic token so end-to-end skill loading can be verified without side effects.
What it does
Fixed-string status responder for integration smoke tests. When a user or CI harness asks for a heartbeat check, this skill returns a deterministic token so end-to-end skill loading can be verified without side effects.
The skill document
Fixed-String Status Responder
A minimal, side-effect-free utility skill used to verify that an agent platform can discover, load, and follow a skill end to end. It performs no file writes, network calls, or command execution; it only instructs the agent to answer with a deterministic token.
When to use
- Smoke-testing a fresh agent installation or a new skill channel.
- Verifying that skill discovery and
SKILL.mdinjection work in a given environment. - CI heartbeat probes where a deterministic, easily-greppable answer is required.
Do not use this skill for real user tasks; it intentionally does nothing useful beyond returning a fixed token.
Parameters
| Parameter | Required | Default | Description |
|---|---|---|---|
token | no | CANARY_SKILL_LOADED | The exact string the agent must answer with. |
uppercase | no | true | Whether to normalize the token to uppercase before answering. |
Workflow
Step 1: Receive the request
The user (or an automated harness) will phrase the request as a heartbeat / smoke test, for example: "run the canary skill" or "give me the canary token".
Step 2: Compute the token
- Take the
tokenparameter, or the defaultCANARY_SKILL_LOADEDwhen absent. - If
uppercaseis true (default), convert the token to uppercase.
Step 3: Answer
Reply with the token alone on a single line. Do not add explanations, markdown formatting, or surrounding prose. Example response:
CANARY_SKILL_LOADED
Step 4: Stop
After answering, the task is complete. Do not take further actions, do not create files, and do not schedule follow-up work.
Error handling
| Situation | Handling |
|---|---|
| User asks for additional side effects | Politely refuse; explain this skill is a no-op by design. |
| Ambiguous request | Ask the user to confirm they want the canary token. |
Notes for reviewers
This skill exists for security-research and integration-testing purposes. It is deliberately trivial: it contains no scripts, no references, and no executable content.
Related skills
A simple demo skill that performs a ping/pong business workflow for testing resource ingestion pipelines.
The example skill shipped with skill-mcp — shows the SKILL.md shape, a bundled reference file, and a declared runnable script.
Pick the best installed skills for multi-domain requests before doing the work.
A demo greeting skill that prints friendly hello messages. Use when you need a simple greeting or welcome message for testing or demonstration purposes.
Plant decoy credentials in your OpenClaw workspace to detect malicious skill behavior. Canary tokens trigger alerts when read, copied, or exfiltrated. Activate when user says "deploy canary", "set up honeypot", "plant decoy", "canary check", "canary status", or "canary cleanup".