Security audit
Security checks across malware telemetry and agentic risk
This appears to be a legitimate peer-collaboration skill, but it needs user review because it persists local coordination data, injects commitment context into sessions, and shares network metadata with peers.
Install only if you are comfortable with relay-based agent collaboration, persistent local key/ledger files, commitment summaries being added to agent context, and public IP metadata being visible to the relay and sometimes peers. Use a relay you trust, avoid putting secrets in handoff text, and treat listener or cron setup as a manual action you should enable deliberately.
3. Write public key hex to `skills/claw-bond/diplomat.pub` → chmod 644
4. Initialize `peers.json` as `{"peers":[]}` and `ledger.json` as `{"sessions":[]}`
5. Append `## Diplomat Deadline Check` block to `HEARTBEAT.md` (idempotent — check for duplicate first)
6. Register cron entry for proactive deadline alerts (Path A). If cron is unavailable, log a warning and continue — Path B (heartbeat fallback) will still work.
7. Show:
```64/64 vendors flagged this skill as clean.
No suspicious patterns detected.