hmbown/mislead
generated/openclaw/mislead/SKILL.md
Mislead is defensive deception: honeypots, canary tokens, decoy endpoints, fake datasets, and other convincing false presences that reveal who is snooping. The goal is not to trick legitimate users for sport. The goal is to create an instrumented fake that attracts unauthorized curiosity while the real system remains elsewhere. This makes the spell powerful and ethically sharp-edged. It needs explicit boundaries, isolation, and a clear monitoring objective before it should be deployed.
$ install --global
skillsauthnpx skillsauth add hmbown/wizards-of-the-ghosts misleadInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 8:37 PM1.6s1 file scanned
SKILL.md
- name:
- mislead
- description:
- Mislead is defensive deception: honeypots, canary tokens, decoy endpoints, fake datasets, and other convincing false presences that reveal who is snooping. The goal is not to trick legitimate users for sport. The goal is to create an instrumented fake that attracts unauthorized curiosity while the real system remains elsewhere. This makes the spell powerful and ethically sharp-edged. It needs explicit boundaries, isolation, and a clear monitoring objective before it should be deployed.
- user-invocable:
- false
- disable-model-invocation:
- true
Mislead
Set a false campfire and watch who gathers around it.
Overview
Mislead is interpreted here as a hybrid spell with a prototype execution model.
Canonical source: Mislead (spell)
Provider target: OpenClaw
When To Use
- You need a honeypot, canary token, or decoy endpoint to detect unauthorized discovery or access attempts.
- The real requirement is defensive visibility into who comes looking for sensitive assets.
- You can isolate the decoy from production behavior and document the response path if it gets touched.
Workflow
- Define the monitoring objective, the expected adversary behavior, and what evidence the decoy should capture.
- Design a believable false surface that is attractive enough to probe but isolated enough not to create production risk.
- Instrument the decoy with alerts, logging, and tripwires that capture contact without escalating harm.
- Specify the response playbook: who gets notified, how evidence is retained, and what actions are explicitly out of scope.
- Return the decoy design with the ethical boundary conditions that make it defensive rather than abusive.
Deliverables
- A decoy or honeypot design with isolation boundaries.
- A tripwire and alerting plan for when the false surface is touched.
- A response playbook covering evidence handling and operator follow-up.
Guardrails
- Use Mislead only for defensive detection, never for fraud, manipulation of legitimate users, or offensive entrapment.
- Keep fake data, decoy endpoints, and real systems cleanly separated so the spell cannot spill into production harm.
Default Invocation
Use $mislead to design a defensive decoy, honeypot, or canary setup that tells us who is snooping without creating collateral damage.
Related Skills
hmbown/zone-of-truth
testing
VerifiedTrustedCommunity
Enter a mode where every assertion is backed by evidence, confidence is calibrated, speculation is flagged, and hallucination is actively resisted.
55SKILL.mdUpdated Apr 5, 2026
hmbown/vicious-mockery
development
VerifiedTrustedCommunity
The bard's cantrip that deals psychic damage through insults. In practice this is adversarial review — the art of finding and articulating exactly what is wrong with something in a way that is impossible to ignore. Unlike polite feedback that gets filed and forgotten, vicious mockery lands. It is the red-team report that makes the PM cancel the launch, the code review that makes the author delete the PR, the roast that makes the founder pivot. The damage is the point.
55SKILL.mdUpdated Apr 5, 2026
hmbown/unseen-servant
tools
VerifiedTrustedCommunity
Use this spell when you need a tireless helper that organizes, tidies, triages, and maintains without requiring your constant attention.
55SKILL.mdUpdated Apr 5, 2026
hmbown/true-strike
testing
VerifiedTrustedCommunity
Use this spell for preflight certainty: dry runs, validation checks, dependency verification, and rehearsals that make the next deploy, query, or command much more likely to succeed. It trades a little time up front for fewer blind swings and fewer expensive misses.
55SKILL.mdUpdated Apr 5, 2026