hmbown/symbol
generated/openclaw/symbol/SKILL.md
In D&D, Symbol inscribes a powerful glyph with a predefined effect — death, fear, sleep, stunning — that triggers when conditions are met. Unlike Glyph of Warding (which protects a specific place or object), Symbol marks a conceptual boundary with a named policy. The real-world version is semantic policy tagging: marking a database column as PII so access triggers audit logging, tagging a deployment as HIPAA-scoped so changes require compliance review, or labeling an API endpoint as rate-limited-aggressive so traffic spikes trigger automatic throttling. The symbol is the policy, and the policy enforces itself.
$ install --global
skillsauthnpx skillsauth add hmbown/wizards-of-the-ghosts symbolInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 5, 2026, 4:58 PM140.4s1 file scanned
SKILL.md
- name:
- symbol
- description:
- In D&D, Symbol inscribes a powerful glyph with a predefined effect — death, fear, sleep, stunning — that triggers when conditions are met. Unlike Glyph of Warding (which protects a specific place or object), Symbol marks a conceptual boundary with a named policy. The real-world version is semantic policy tagging: marking a database column as PII so access triggers audit logging, tagging a deployment as HIPAA-scoped so changes require compliance review, or labeling an API endpoint as rate-limited-aggressive so traffic spikes trigger automatic throttling. The symbol is the policy, and the policy enforces itself.
- user-invocable:
- true
Symbol
Mark a resource with a named sigil that triggers automatic policy enforcement when conditions are met.
Overview
Symbol is interpreted here as a literal spell with a shipping-now execution model.
Canonical source: Symbol (spell)
Provider target: OpenClaw
When To Use
- A resource, role, or state needs a machine-readable tag that carries enforcement with it wherever it appears.
- Audit logging, throttling, approval gates, or compliance review should trigger automatically from classification.
- You need a named policy marker that expresses semantic scope, not just a location-bound tripwire.
Workflow
- Identify the resource, role, or state to mark and the policy the symbol should represent.
- Define the trigger conditions, enforcement actions, owner, and scope of the symbol.
- Apply the symbol as a machine-readable tag or classification that downstream systems can detect.
- Test visibility and precedence against existing policies so the sigil is legible and deterministic.
- Return the symbol definition, enforcement paths, and failure modes.
Deliverables
- A named policy symbol with scope, owner, and machine-readable definition.
- Trigger conditions and automatic enforcement actions.
- A precedence and visibility note covering conflicts, auditability, and blind spots.
Guardrails
- Symbols must be visible to the people they constrain. Hidden policy enforcement without disclosure is a trap, not a safeguard.
- Every symbol needs a defined scope and an owner. Policy tags that outlive their original context become governance ghosts — still triggering, no longer understood.
- Do not stack conflicting symbols on the same resource without explicit precedence rules.
Default Invocation
Use $symbol to mark this resource, role, or state with a named policy sigil that triggers automatic enforcement when conditions are met.
Related Skills
hmbown/zone-of-truth
testing
VerifiedTrustedCommunity
Enter a mode where every assertion is backed by evidence, confidence is calibrated, speculation is flagged, and hallucination is actively resisted.
55SKILL.mdUpdated Apr 5, 2026
hmbown/vicious-mockery
development
VerifiedTrustedCommunity
The bard's cantrip that deals psychic damage through insults. In practice this is adversarial review — the art of finding and articulating exactly what is wrong with something in a way that is impossible to ignore. Unlike polite feedback that gets filed and forgotten, vicious mockery lands. It is the red-team report that makes the PM cancel the launch, the code review that makes the author delete the PR, the roast that makes the founder pivot. The damage is the point.
55SKILL.mdUpdated Apr 5, 2026
hmbown/unseen-servant
tools
VerifiedTrustedCommunity
Use this spell when you need a tireless helper that organizes, tidies, triages, and maintains without requiring your constant attention.
55SKILL.mdUpdated Apr 5, 2026
hmbown/true-strike
testing
VerifiedTrustedCommunity
Use this spell for preflight certainty: dry runs, validation checks, dependency verification, and rehearsals that make the next deploy, query, or command much more likely to succeed. It trades a little time up front for fewer blind swings and fewer expensive misses.
55SKILL.mdUpdated Apr 5, 2026