The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The installation instructions direct users to clone and run code from a repository at github.com/O-ozzz/OctoGuard--Free-OpenClaw-Security-Supervision-System.git. This source is not from a verified or trusted organization.
[COMMAND_EXECUTION]: The troubleshooting section includes a node -e command that interpolates environment variables (EMAIL_USER, EMAIL_PASSWORD) directly into a shell-executed string. This pattern is vulnerable to command injection if the variables contain shell-metacharacters.
[DYNAMIC_EXECUTION]: The skill uses child_process.spawn for process management of the OpenClaw gateway and node -e for the runtime execution of diagnostic scripts.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: Untrusted data enters the system through req.body.user_input in the interceptRequest middleware.
Boundary markers: None identified; the raw input is passed directly to the policy evaluation engine without delimiters.
Capability inventory: The skill has the ability to block tool calls, monitor network activity, and send external alerts via email and webhooks.
Sanitization: The system relies exclusively on Regular Expression matching for security enforcement and lacks robust input sanitization or structured validation of the processed prompts.

octoguard-openclaw-security-supervision