ClawHub
Skill flagged — review recommended

ClawHub Security found sensitive or high-impact capabilities. Review the scan results before using.

Governance.Wrapper

Mandatory strict-mode execution wrapper for autonomous operations with evidence logging and policy enforcement

Audits

Suspicious
ClawScanSuspicious

Agentic behavior and permission review.

Static analysisPending

Pattern checks against bundled files.

VirusTotalPass

Multi-engine malware detections and file reputation.

Install

openclaw skills install governance-wrapper

All autonomous operations in strict mode must execute through this wrapper:

python3 /home/openclaw/.openclaw/workspace/governance/governance_wrapper.py

Required parameters:

  • --requested-skill
  • --system-prompt
  • --input-context

Strict-mode controls enforced by the wrapper:

  • Model lock (opencode/big-pickle, no fallback, temperature 0.0)
  • Skill allowlist enforcement from tool surface manifest
  • Network allowlist enforcement for outbound HTTP
  • Subagent semaphore (maxConcurrentSubagents)
  • Mandatory execution-evidence.v1 emission
  • Hash-chained append-only evidence logging

Any policy violation results in a blocked execution with recorded evidence.