backbay-labs/clawdstrike-tui-release-hardening
.agents/skills/clawdstrike-tui-release-hardening/SKILL.md
Use when the ClawdStrike TUI needs release-candidate hardening around bootstrap, doctor/init, installed runtime packaging, local agent connectivity, cluster watch connectivity, or evidence export traceability.
$ install --global
skillsauthnpx skillsauth add backbay-labs/clawdstrike clawdstrike-tui-release-hardeningInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 20, 2026, 6:49 AM51.5s1 file scanned
SKILL.md
- name:
- clawdstrike-tui-release-hardening
- description:
- Use when the ClawdStrike TUI needs release-candidate hardening around bootstrap, doctor/init, installed runtime packaging, local agent connectivity, cluster watch connectivity, or evidence export traceability.
ClawdStrike TUI Release Hardening
Use this skill when the work is about making clawdstrike tui shippable and boringly dependable.
Outcomes
Drive toward:
- reproducible
initanddoctor - working installed-runtime launch path
- clear local-versus-cluster operator state
- traceable report export and audit handoff
- release docs that match the real product surface
Workflow
- Prefer the public entrypoint:
clawdstrike tui. - Validate bootstrap first:
doctor,init, wrapper resolution, Bun/runtime detection. - Check the operator surfaces that must work in beta: integrations, security, audit, watch, report, history.
- Verify local daemon and desktop-agent state separately from cluster-backed watch state.
- If packaging changes, test both repo-local and staged installed-runtime paths.
- Keep docs and product language honest about supported versus experimental screens.
Required Verification
Use the relevant subset of:
cd apps/terminal && bun run build:tui-runtimecd apps/terminal && bun run typecheckcd apps/terminal && bun testcargo test -p hush-cli tui::tests -- --nocapturecargo test -p hush-cli test_tui_command_parses_with_passthrough_args -- --nocapture
Guardrails
- A graceful degraded state is acceptable; a misleading healthy state is not.
- Do not claim cluster watch works unless the live transport connects.
- Do not leave docs ahead of implementation.
Related Skills
backbay-labs/hello-secure
testing
VerifiedTrustedCommunity
A simple skill demonstrating clawdstrike security
273SKILL.mdUpdated Apr 3, 2026
backbay-labs/examples/openclaw-plugin/skills/hello
tools
VerifiedTrustedCommunity
# Hello Skill A simple greeting skill that demonstrates secure agent operation. ## Description This skill allows the agent to greet users and perform basic file operations within the allowed workspace. ## Capabilities - Generate personalized greetings - Read files from the workspace - Write greeting logs to the output directory ## Usage Ask the agent: - "Say hello to Alice" - "Read the welcome message from data/welcome.txt" - "Log a greeting for Bob" ## Examples ### Basic Greeting **Us
273SKILL.mdUpdated Apr 3, 2026
backbay-labs/examples/bb-edr/skills/edr-triage
testing
VerifiedTrustedCommunity
# bb-edr: Triage Skill Use this skill to turn clawdstrike audit logs into an incident report and a minimal response plan. ## Inputs - `.hush/audit.jsonl` (JSONL) — clawdstrike audit events (allowed/denied, guard, reason). - `policy.yaml` — the active security policy. ## Task 1. Read and summarize the last ~50 audit events. 2. Focus on **denied** events first: - Group by `guard` (e.g., `forbidden_path`, `egress`, `patch_integrity`) - Identify likely intent (misconfiguration vs. suspici
273SKILL.mdUpdated Apr 3, 2026
backbay-labs/cursor-plugin/skills/threat-hunt
tools
VerifiedTrustedCommunity
Threat hunting and security event investigation
273SKILL.mdUpdated Apr 3, 2026