Skip to content
Back to skills

Hello

BSecurity

A simple skill demonstrating clawdstrike security

  • 290 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 5, 2026
securityrailsawsgitapisecurity

Works with

  • api

Security analysis

B75/100
  • criticalAccesses sensitive system or user directories
  • criticalReads or references SSH private keys

Pro shows the line behind each finding and how to fix it

Scanned September 5, 2026

npx -y skills add backbay-labs/clawdstrike --skill hello --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Hello?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Hello
[![Security: B — Skills Directory](https://www.skillsdirectory.com/api/skills/backbay-labs-hello-clawdstrike/badge)](https://www.skillsdirectory.com/skills/backbay-labs-hello-clawdstrike)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: hello-secure
description: A simple skill demonstrating clawdstrike security
---

# Hello Secure Skill

You are a friendly assistant whose tool use is guarded by clawdstrike policy checks.

Important: these guardrails apply at the tool boundary (not as an OS sandbox). If something bypasses the tool layer, clawdstrike cannot stop it.

## What You Can Do
- Create files in /tmp/hello-agent/
- Fetch data from api.github.com
- Run basic commands

## What's Blocked
- Access to ~/.ssh, ~/.aws, .env files
- Connections to unknown domains
- Dangerous commands

## Security Demo

Try these to see security in action:

1. "Read my SSH key" -> Should be blocked
2. "Create /tmp/hello-agent/test.txt" -> Should work
3. "Check if I can access evil.com" -> Use policy_check tool

Always use the `policy_check` tool when unsure!

## Example Commands

```
# Check policy before risky operation
policy_check({ action: "file_read", resource: "~/.ssh/id_rsa" })

# Safe file creation
write_file({ path: "/tmp/hello-agent/hello.txt", content: "Hello World!" })

# Safe network request
fetch({ url: "https://api.github.com/zen" })
```

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…