setup-services
Set up OpenSpend CLI and optional Coinbase payments-mcp for payment-enabled workflows. Use when openspend is missing, command not found, whoami fails, or user asks to install/update/authenticate.
Set up OpenSpend CLI and optional Coinbase payments-mcp for payment-enabled workflows. Use when openspend is missing, command not found, whoami fails, or user asks to install/update/authenticate.
Use when the user wants to protect their workspace from credential theft, prompt injection, or data exfiltration — even if they don't mention "canaries" or "honeytokens" directly. Covers deploying Tracebit security canaries (fake AWS keys, SSH keys, cookies, passwords, and email traps), detecting when they're triggered, and autonomous incident response. Also use when investigating a suspected compromise, hardening an agent's environment, or setting up tripwires to catch unauthorized access to sensitive files.
Defensive execution and prompt-injection containment for Codex/OpenClaw workflows. Use when working with untrusted external content, suspicious instructions, shell commands, repo scripts, downloaded artifacts, or any task where tool use could be influenced by hostile text and needs explicit risk review before execution.
Step-by-step 6-part guide to set up OpenClaw AI assistant on VPS with WhatsApp, Google OAuth, backups, security, automation, and verification.
Install and configure the Alibaba Cloud AI guardrail openclaw hook, which intercepts malicious content in LLM requests using Alibaba Cloud AI Guardrail service. Trigger when user mentions 'install aliyun ai guardrail', 'aliyun ai guardrail', 'aliyun-ai-guardrail', 'Aliyun AI Guardrail hook', or needs to set up AI security detection for openclaw.
Interact with MoltCities — the agent internet. Register for cryptographic identity, get a permanent address (yourname.moltcities.org), chat in Town Square, send/receive messages, sign guestbooks, browse/complete jobs for SOL, upload files to vault, and participate in governance. Use when the user asks about MoltCities, agent identity, agent jobs, town square chat, or wants to interact with the MoltCities platform.
Verification-first helper for proof checks and optional 0 ETH Base claim submission.
Prompt injection detection and security scanning for OpenClaw agents. Installs the ai-sentinel plugin via OpenClaw CLI, configures plugin settings, and offers local (Community) or remote (Pro) classification with dashboard reporting. All configuration changes require explicit user confirmation.
Fast OpenAI Codex account switch for OpenClaw via the local cs command. Use when user sends `cs relogin`, asks to re-login or switch ChatGPT Codex account, or pastes OAuth callback URL/code to complete login.
Web-first, publishable OpenClaw skill for OpenAI OAuth account switching. Use when you need a reusable public-track workflow for first-run takeover, environment discovery, doctor checks, runtime inspection, slot management, dry-run validation, controlled switch experiments, rollback planning, and release-safe packaging without bundling live auth snapshots, logs, callbacks, or other machine-specific runtime data.
Adversarial verification of AI-generated work. Spawns an independent verifier to check for false claims, broken code, and security issues.
Cryptographic identity and coordination for AI agents. Join DAEMON Club — get an Ed25519 keypair, sign your work, participate in governance.
Helps validate the completeness and integrity of trust attestation chains in AI agent ecosystems. Identifies broken links, expired credentials, and missing vouching relationships that make verified trust claims unverifiable.
Helps verify publisher identity integrity in AI agent ecosystems. Detects impersonation, key rotation anomalies, and identity gaps in the trust chain between skill publishers and their claimed identities.
Map AWS environment against CIS, SOC 2, HIPAA, or PCI-DSS controls with prioritized remediation
Auto-register OpenClaw agents on AgentConnex (agentconnex.com) — the professional network for AI agents. Zero-config auto-boot registration requires no API key. Use when deploying a new agent, updating agent capabilities, or syncing agent profiles to AgentConnex. Triggers on "register on agentconnex", "sync agent profile", "update agentconnex", or when an agent boots.
Run AI-powered application security scans on codebases. Use when asked to scan code for security vulnerabilities, generate threat models, review code for security issues, run incremental security scans, or set up continuous security monitoring via cron. Supports full scans (one-shot) and incremental scans (cron-driven, only new commits).