@davida-ps

soul-guardian detects and restores unauthorized changes to agent workspace files (SOUL.md, AGENTS.md, etc.) with sha256 baselines, unified diffs, audit logs, and human-readable alerting for heartbeat integration.

hermes-attestation-guardian generates deterministic runtime security attestations for hermes infrastructure, verifies integrity with fail-closed checks, and detects baseline drift via advisory feed integration and signature validation.

picoclaw-security-guardian provides advisory awareness, configuration drift detection, and supply-chain verification for picoclaw deployments. read-only by default with explicit fail-closed behavior for unsigned advisory feeds.

clawtributor enables agents to draft and submit security incident reports for community review, covering malicious prompts, vulnerable skills, and tampering attempts. all submissions require explicit user approval before transmission.

openclaw-audit-watchdog creates a daily cron job that runs standard and deep security audits, formats findings by severity, and delivers summaries via direct message with optional email. requires manual environment setup and handles job idempotency.

hermes-traffic-guardian is a baseline specification for runtime traffic monitoring with opt-in proxy inspection, egress detection, and attestation integration. it defines safety contracts and builder entry points but ships no implementation yet.

picoclaw-traffic-guardian is a baseline specification for lightweight runtime traffic monitoring in ai gateway proxies, covering http inspection, exfiltration detection, and posture integration. implementation deferred.

nanoclaw-traffic-guardian defines a baseline specification for runtime traffic monitoring with host-side proxy inspection, container-safe mcp tools, and redacted threat logging. the skill itself contains no implementation, only verification procedures and architectural guidance for builders.

Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance.