Skill Guardian 🛡️

Your AI skill security guard — Track, vet, and safely update your skill collection.

Tags: security skill-management trust-scoring auto-update cron-ready safety version-control curation vetting guardian

Why Use Skill Guardian?

🔒 Security First — Auto-scans every skill before adding

📊 Trust Scores — Know which skills are safe at a glance

⏰ Smart Updates — High-trust skills (≥90) update immediately, others wait 10 days

📝 Pending Period — New skills wait 5-10 days before activation

🤖 Auto-Scheduled — Runs 1-2 times daily automatically

Quick Start

1. Install & Setup

# Install the skill
clawhub install skill-guardian

# Set up automated monitoring (recommended)
# See "Automated Scheduling" section below

2. Add a Skill Safely

python3 scripts/add_skill.py --name summarize --source clawhub

Skill Guardian will:

• ✅ Run security checks
• ✅ Assign trust score (0-100)
• ✅ Add to pending queue (5-10 days)
• ✅ Auto-promote after waiting period

3. View Your Collection

python3 scripts/list_skills.py          # Active skills
python3 scripts/show_skill.py summarize # Detailed info

4. Smart Updates

Check for updates:

python3 scripts/check_updates.py

Apply updates (intelligent rules):

python3 scripts/apply_updates.py --all

Update Rules:

• 🌟 Trust ≥90: Immediate update
• ⏳ Trust 70-89: 10-day grace period
• 🛑 Trust <70: Manual approval required

Override for urgent updates:

python3 scripts/apply_updates.py summarize --force

5. Process Pending Skills

Manually check pending queue:

python3 scripts/process_pending.py

Automated Scheduling ⏰ (Recommended)

Skill Guardian works best when run automatically 1-2 times daily.

Option 1: System Cron

Add to crontab for morning (8am) and evening (8pm) runs:

# Edit crontab
crontab -e

# Add these lines
0 8 * * * cd /path/to/workspace && python3 skills/skill-guardian/scripts/auto_run.py
0 20 * * * cd /path/to/workspace && python3 skills/skill-guardian/scripts/auto_run.py

Option 2: Single Daily Run

# Once daily at 9am
0 9 * * * cd /path/to/workspace && python3 skills/skill-guardian/scripts/auto_run.py

Option 3: Manual Execution

If you prefer manual control:

# Full auto-run workflow
python3 skills/skill-guardian/scripts/auto_run.py

# Or step by step:
python3 scripts/process_pending.py      # Promote pending skills
python3 scripts/check_updates.py        # Check for updates
python3 scripts/apply_updates.py --all  # Apply updates

What Auto-Run Does

Each execution performs:

1. 🔍 Process Pending — Promote skills that passed 5-10 day waiting period
2. 📦 Check Updates — Detect new versions of all skills
3. 🔄 Apply Updates — High-trust (≥90) update immediately, others queued
4. 📊 Report Status — Show current registry state

Trust Score Explained

Included Trusted Skills

New Skill Workflow

User/Auto-detect finds skill
        ↓
   Security vetting
        ↓
   PENDING queue (5-10 days)
        ↓
   Waiting period
        ↓
   Auto-promoted ✓

Update Workflow

Check detects new version
        ↓
   Trust ≥90? ──→ Immediate update
        ↓ No
   10-day delay
        ↓
   Auto-apply

Advanced

• Registry format
• Trust calculation
• Cron setup guide

Requirements

• Python 3.8+
• clawhub CLI installed
• skill-vetter (for security scanning)
• Cron (optional, for automation)

License

MIT