OpenClaw cloud security guardrail that enforces pre-execution checks, source trust classification, taint tracking, metadata endpoint blocking, and output red...
文档
OpenClaw Ecosystem Monitor
试用Monitor public OpenClaw ecosystem sources with source-quality checks, metadata-only collection, and trust-first reporting.
它能做什么
Monitor public OpenClaw ecosystem sources with source-quality checks, metadata-only collection, and trust-first reporting.
技能文档
OpenClaw Ecosystem Monitor
This skill collects metadata-only signals from public OpenClaw ecosystem sources and reports freshness, dependency, and trust signals with canonical source links.
Use Cases
- Track OpenClaw-related npm package freshness.
- Track public GitHub repository metadata and small contribution candidates.
- Track OpenClaw docs and ClawHub availability/freshness.
- Produce source-linked summaries without copying full issue bodies, README files, docs pages, or package tarballs.
Data Discipline
Before collecting any source, read sources/source_quality.yaml.
Hard rules:
- Use official APIs when available.
- Store only normalized metadata, short summaries, hashes, timestamps, and canonical source URLs.
- Do not store secrets, cookies, access tokens, account IDs, or private user data.
- Do not bulk mirror package tarballs, docs pages, README files, or issue bodies.
- Stop on 403, 429, robots disallow, DMCA/abuse signal, or platform warning.
Run
From this skill directory:
node scripts/collect-openclaw-ecosystem.mjs
node scripts/render-demo-report.mjs
The collector writes a local JSON snapshot under data/YYYY-MM-DD/. The renderer writes a Markdown report under reports/.
Local Runtime
The OpenClaw computer can run this skill without an agent/model turn through:
ops/run-openclaw-ecosystem-monitor.sh
That wrapper only runs the local scripts. It does not post messages, publish reports, call models, or use secrets.
Trust Requirements
This skill includes the trust and distribution-review docs:
trust/permission-manifest.mdtrust/no-secret-policy.mdtrust/test-fixture.mdtrust/rollback.mdtrust/privacy.mdtrust/threat-model.mdtrust/external-services.mdtrust/pricing-boundary.mdpublish/sanitized-demo-report.mdCHANGELOG.md
Monetization Boundary
This skill is free/distribution-first. It has no payment code, no checkout, and no paid ClawHub assumption.
No hosted API, checkout, paid listing, invoice flow, or donation link is included.
相关技能
为 AI 智能体订阅社区维护的安全公告情报源,及时获取威胁与漏洞更新。
Perform a strict, evidence-based, read-only security assessment of the current OpenClaw host, review each NOT_TESTED item through targeted OpenClaw Agent inv...
OpenClaw runtime traffic monitoring baseline for opt-in HTTP/HTTPS proxy inspection, egress detection, inbound injection detection, and social-account policy...
Test the latest OpenClaw main commit through an isolated OCM copy or an explicitly approved in-place gateway update, then guide structured release feedback.
Install, configure, operate, and productize OA monitoring and self-heal workflows for OpenClaw workspaces. Use when Codex needs to set up or repair `oa-cli`,...