mirror of
https://github.com/outbackdingo/optimclaw.git
synced 2026-09-03 10:09:30 +00:00
Add skill system for shareable prompt-level agent behaviors
Skills are TOML manifests containing instructions injected into the LLM context. They can be loaded from GitHub repos, URLs, or local files and activated via /skill commands or custom slash commands from any channel. Five defense layers protect against malicious skills: static analysis (Aho-Corasick + skill-specific regex), hard tool whitelist (registry + execution level), resource restrictions (domains, workspace paths, tool call budget), BLAKE3 approval pinning, and structural prompt isolation via <external_skill> wrapper with reassertion block. Co-Authored-By: Claude Opus 4.6 <[email protected]>
This commit is contained in:
co-authored by
Claude Opus 4.6
parent
48ab73574e
commit
c19986f06d
@@ -18,6 +18,7 @@ reqwest = { version = "0.12", default-features = false, features = ["json", "rus
|
||||
# Serialization
|
||||
serde = { version = "1", features = ["derive"] }
|
||||
serde_json = "1"
|
||||
toml = "0.8"
|
||||
|
||||
# Database
|
||||
deadpool-postgres = "0.14"
|
||||
|
||||
Reference in New Issue
Block a user