A mandatory security gatekeeper that audits and validates new code, scripts, and MCP servers against the SEP-2026 Zero Trust protocol.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install ztp
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install ztp using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is ZTP (Zero Trust Protocol) Security Skill?
ZTP (Zero Trust Protocol) is a specialized security layer designed for the Openclaw Skills ecosystem to act as a rigorous gatekeeper. It enforces the SEP-2026 Security Protocol, providing developers with the tools to audit source code for malicious patterns, obfuscation, and unauthorized network capabilities before any integration occurs.
By prioritizing a Zero Trust philosophy, this skill ensures that external code, including other Openclaw Skills, Python scripts, and MCP servers, are thoroughly vetted. It acts as the primary line of defense against supply chain attacks and ensures that no untrusted code is executed within the agent's environment without passing a multi-stage audit.
ZTP (Zero Trust Protocol) Security Skill Use Cases
- Auditing new Python files, third-party skills, or MCP Servers before local installation.
- Verifying the safety and integrity of scripts downloaded from external repositories.
- Checking for supply chain vulnerabilities such as typosquatting in requirements.txt or package.json files.
- Validating the security posture of custom-built Openclaw Skills before deployment.
How ZTP (Zero Trust Protocol) Security Skill Works
- Acquire: The skill identifies and locates the target code or directory intended for audit.
- Isolate: It ensures the target code remains in a non-executable state to prevent accidental activation.
- Scan: The Shield Pro 2.0 static analyzer is executed on the target to identify critical vulnerabilities.
- Evaluate: Results are analyzed; any findings labeled as CRITICAL or HIGH result in an immediate rejection of the code.
- Augment: If available, the skill runs supplementary tools like Bandit, Safety, or Trivy to broaden the security coverage.
- Report: A comprehensive report is presented to the user, highlighting potential Lines of Code (LOC) and specific threat types.
ZTP (Zero Trust Protocol) Security Skill Setup
To set up the ZTP security gatekeeper for your Openclaw Skills environment, follow these steps:
# Navigate to the security skill directory
cd skills/openclawSecurity
# Ensure all dependencies for Shield Pro are met
# Run a deep audit on a target directory
python3 scripts/shield_pro.py --target <path_to_scan> --format json
ZTP (Zero Trust Protocol) Security Skill Data Schema & Taxonomy
The skill generates structured security reports to maintain the integrity of Openclaw Skills. The data is organized as follows:
| Attribute | Description |
|---|---|
status |
The final verdict: PASS, FAIL, or HALT (for manual review). |
findings |
A list of detected issues categorized by severity (CRITICAL, HIGH, MEDIUM). |
threat_type |
The specific nature of the vulnerability, such as Obfuscation or Unauthorized Network Access. |
loc |
The specific Line of Code in the source file where the risk was identified. |
tool_reports |
Supplemental data from integrated tools like Bandit, Safety, or NPM Audit. |
ZTP (Zero Trust Protocol) Security Skill Advanced Features
- Shield Pro 2.0 static analysis for deep code inspection.
- Supply chain defense mechanisms to detect typosquatting in dependency manifests.
- Layer 2 External Defense Arsenal integration supporting Bandit, Safety, and Trivy.
- LLM-specific security testing via Garak to prevent prompt injection attacks within Openclaw Skills.
- Strict No-Execution policy ensures all audits are performed on static files to eliminate runtime risks.
SKILL.md
Loading
Related Openclaw Skills
Test Skill
A diagnostic utility for verifying the functionality and configuration of your AI agent environment.
MoltGuard
A comprehensive runtime security guard for OpenClaw agents providing local-first protection against exfiltration, injection, and sensitive data leaks.
flaw0
An AI-powered security scanner designed to detect vulnerabilities in OpenClaw code, plugins, and Node.js dependencies.
OpenGuardrails
OpenGuardrails is an open-source runtime security plugin designed to protect AI agents from data exfiltration, prompt injection, and sensitive data leakage.
OpenClaw Gateway File Descriptor Fix
A specialized maintenance tool designed to resolve Gateway crashes caused by file descriptor exhaustion and workspace file bloat.
Web Deploy GitHub Pages
An autonomous workflow for building and deploying static sites to GitHub Pages using GitHub Actions.
Featured*
