@opena2a/skillguard-openclaw

Skill integrity plugin for HackMyAgent. Hash pinning, filesystem watcher, sandbox enforcement, and tamper detection.

Part of the HackMyAgent security toolkit.

Install

npm install @opena2a/skillguard-openclaw

Usage

import { createPlugin } from '@opena2a/skillguard-openclaw';
import { registerPlugin } from '@opena2a/plugin-core';

const plugin = createPlugin();
registerPlugin(plugin);

// Scan for skill integrity issues
const findings = await plugin.scan('/path/to/project');

What It Does

• Hash pinning — Pins skill files by SHA-256 hash so modifications are detected
• Filesystem watcher — Monitors skill directories for unauthorized changes at runtime
• Sandbox enforcement — Verifies skills run within their declared capability boundaries
• Tamper detection — Alerts when skill files have been modified since last verification

Related

• @opena2a/plugin-core — Plugin interface
• @opena2a/signcrypt-openclaw — Configuration integrity
• hackmyagent — Full security toolkit

License

Apache-2.0