@davida-ps

soul-guardian detects and restores unauthorized changes to agent workspace files (SOUL.md, AGENTS.md, etc.) with sha256 baselines, unified diffs, audit logs, and human-readable alerting for heartbeat integration.

hermes-attestation-guardian generates deterministic runtime security attestations for hermes infrastructure, verifies integrity with fail-closed checks, and detects baseline drift via advisory feed integration and signature validation.

clawtributor enables agents to draft and submit security incident reports for community review, covering malicious prompts, vulnerable skills, and tampering attempts. all submissions require explicit user approval before transmission.

openclaw-audit-watchdog creates a daily cron job that runs standard and deep security audits, formats findings by severity, and delivers summaries via direct message with optional email. requires manual environment setup and handles job idempotency.

nanoclaw-traffic-guardian defines a baseline specification for runtime traffic monitoring with host-side proxy inspection, container-safe mcp tools, and redacted threat logging. the skill itself contains no implementation, only verification procedures and architectural guidance for builders.

Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance.

Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance.

Hermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture.

Picoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration.