Token导航 LogoToken导航TokenDH.com
研究检索需要联网clawhub未标认证来源可访问clear审计通过

agent-rule-auditAgent 规则审核

Agent Skill

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

总安装

3,771

周安装

162

GitHub Stars

公开资料未说明

下载量

1,322
OpenClaw

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

MIT-0

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:agent-rule-audit(Agent 规则审核)
来源仓库:https://github.com/gkso/agent-rule-audit
安装命令:
openclaw skills install agent-rule-audit
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 OpenClaw 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

ClawHubOpenClaw
openclaw skills install agent-rule-audit

简介

审核代理行为层规则的完整性、一致性与安全性,发现潜在冲突。

  • 适用于代理上线前的合规性检查和规则优化。
  • 自动检测冗余、薄弱或偏离来源的行为指导条目。
  • 安装命令:openclaw skills install agent-rule-audit,需读取代理配置文件权限。
  • 输出结果不可直接作为最终结论,需人工复核高风险项。

SKILL.md

name
agent-rule-audit
description
Audit an OpenClaw agent's behavior-layer rules and prompt sources to find drift, redundancy, conflict, loss of focus, and weak behavior guidance. Use when reviewing an agent's core behavior files, any behavior-shaping correction/learnings layer that exists in the target workspace, and any explicitly referenced shared rule files; when checking why an agent behaves poorly despite many rules; when deciding which rules should stay core, move out, or be strengthened; and when running an agent self-audit.

Agent Rule Audit

Audit the files that actually shape an OpenClaw agent's behavior. Focus on behavior-layer quality, not general file cleanup.

Quick start

  1. Identify the audit target: which agent/workspace is being reviewed.
  2. Read the core behavior-layer files first.
  3. Read shared rule files only when the core files explicitly depend on them.
  4. Stay with the default core scope first. Widen only when the core files are not enough to explain the behavior, or when the user asks for a deeper audit.
  5. Produce two outputs:

- audit conclusions - executable restructuring recommendations

  1. Separate root causes from surface symptoms.

Default audit scope

By default, inspect only the agent's core, stable behavior files — the files most likely to be loaded every session and to consistently shape behavior.

Core behavior layer

Read these first when present:

  • AGENTS.md
  • SOUL.md
  • USER.md
  • MEMORY.md (if present)
  • TOOLS.md
  • IDENTITY.md
  • HEARTBEAT.md

See references/openclaw-behavior-sources.md for why these matter in OpenClaw.

Optional widening

Only widen beyond the core set when needed, for example:

  • the user explicitly asks for a broader audit
  • the core files explicitly depend on another file
  • the core files look fine but behavior clearly points to another steering source
  • a recent correction/example cannot be explained from the core files alone

Possible widening targets:

  • shared rule files explicitly referenced by the core files
  • any correction / learnings / workflow-improvement layer that exists in the target workspace
  • behavior-improvement or trial-related supporting files when they exist in the target workspace
  • recent behavioral evidence files when they exist in the target workspace
  • user-provided examples/screenshots/transcripts

What to look for

Use the problem categories in references/problem-types.md. Default categories:

  • structure confusion
  • repetition / redundancy
  • rule conflict
  • focus drift
  • behavior-layer dilution from too many weak rules
  • symptom-vs-root-cause confusion
  • style guidance overpowering execution guidance
  • stale or superseded rules not cleaned up
  • trial rules that never reached the live behavior layer

Audit workflow

1. Map the real behavior sources

Do not assume every file matters equally. First answer:

  • Which files are most likely shaping behavior now?
  • Which are direct behavior rules vs supporting evidence?
  • Which are probably ignored or low-weight?

2. Identify the user's real complaint

Do not let verbose files distract from the actual failure mode. Ask or infer:

  • What is the user truly unhappy with?
  • What is the root problem?
  • Which observed symptoms are secondary?

Example: “progress-sounding replies” may be a symptom; “not actually doing the work” may be the root issue.

3. Read for layering problems

Check whether files are cleanly separated by role:

  • identity/persona
  • working style
  • hard boundaries
  • task execution rules
  • temporary trial rules
  • business workflow rules

Flag when these are mixed together in ways that weaken the important rules.

4. Check alignment across files

Ask:

  • Do the core live rules point in the same direction, or are they pulling behavior apart?
  • Does the workspace's correction / learnings layer support or contradict the live rules?
  • If the widened scope includes behavior-improvement or trial files, do those files match the live rules?
  • Are older rules still pulling behavior in the wrong direction?

5. Judge whether the most important rule is actually prominent enough

The key audit question is not just “is the right rule written somewhere?” It is:

  • Is the right rule clear?
  • Is it near the top or buried?
  • Is it specific enough to change behavior?
  • Is it being diluted by too many softer surrounding rules?

6. Recommend by role, not by habit

Do not tell the user to rewrite everything. Recommend changes by file role:

  • what should stay in AGENTS.md
  • what should move to the workspace's correction / learnings layer
  • what should move to references/review/tracking
  • what should become a stronger core rule
  • what should be deleted or merged

Output structure

Use this default output shape:

  1. Audit scope — what was checked
  2. Overall judgment — is the behavior layer mostly aligned or not
  3. Highest-priority problems — ranked
  4. Root cause vs symptoms — where relevant
  5. What is already fine — avoid over-editing
  6. Recommended changes — concrete and file-specific

For a reusable outline, see references/output-template.md.

Important judgment rules

  • Do not confuse “a rule exists somewhere” with “the agent is actually being steered by it.”
  • Do not recommend giant rewrites when a smaller structural cleanup would solve the issue.
  • Prefer fewer, clearer, stronger rules over many overlapping weak ones.
  • When the user's complaint is concrete, optimize for that real complaint first.
  • If a problem is mainly workflow/process rather than prompt wording, say so plainly.

When to widen the audit

Widen beyond the default scope only when needed, for example:

  • a shared file is explicitly referenced
  • the user asks for a broader workspace audit
  • the core files look fine but behavior still points to another steering source
  • recent behavioral evidence contains the only concrete signs of how the behavior shifted

适合场景

01

OpenClaw 用户查找和安装 Skill 时

02

用户想查找某类 Agent Skill 时

03

需要根据任务场景推荐可安装能力包时

04

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

补充不同宿主或平台的使用分布数据

能力 5

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

OpenClaw

91.2%
按下载量换算1,206

安全审计

VirusTotal

通过

ClawScan

通过

Static analysis

通过

权限和风险

需要联网

该 Skill 可能需要联网访问来源站点、仓库或外部 API;具体网络访问范围需要结合源码和 README 复核。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills