name: shell-security-ultimate version: 2.2.1 description: "Classify every shell command as SAFE, WARN, or CRIT before your agent runs it." metadata: openclaw: owner: kn7623hrcwt6rg73a67xw3wyx580asdw category: security tags: - shell - command-classification - risk-management - agent-safety license: MIT notes: security: "Instruction-only skill that classifies shell commands before execution — it does NOT execute commands itself. Teaches the agent to label every command as SAFE, WARN, or CRIT and enforce approval gates. No binaries, no network calls, no credentials. All logic runs within the existing LLM context."

Shell Security Ultimate

Your agent has root access. Every command it runs is one bad inference away from rm -rf / or curl | bash from a stranger's repo.

This skill won't let that happen.

How It Works

Every shell command gets classified before execution:

• 🟢 SAFE — Read-only, harmless. Runs without friction.
• 🟡 WARN — Could modify state. Logged, flagged, your call.
• 🔴 CRIT — Destructive or irreversible. Blocked until you say so.

No command runs unclassified. No silent chmod 777. No quiet dd if=/dev/zero. Your agent won't accidentally email your SSH keys, won't helpfully format a disk, and won't DROP TABLE users because it misread the task.

What You Get

• Pre-execution classification for every command, every time
• Detailed operation logs so you see exactly what ran and why it was allowed
• Full override control — approve, deny, or escalate at any level

Who It's For

Anyone giving an AI agent shell access and wanting to sleep at night.

Clone it. Fork it. Break it. Make it yours.

👉 Explore the full project: github.com/globalcaos/clawdbot-moltbot-openclaw