القائمة
Know the file you're editing is the file you think it is — verify integrity before you act
يُحدَّد Prompt الذي يراجع المصدر أولًا بشكل افتراضي. يمكنك التبديل إلى أمر مباشر أو تنزيل نسخة محلية.
اقرأ SKILL.md وأي ملفات مرافقة يعرضها SkillsMP قبل أن تقرر التثبيت.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
يتجاوز الأمر المباشر Prompt المخصّص للمراجعة. افحص المصدر قبل تشغيله.
npx skills add https://github.com/johnalbertini14-glitch/openclaw-skills --skill context-verifierيبقى الأمر في سطر واحد. مرّر أفقيًا لمراجعته كاملًا قبل النسخ.
تفضّل نسخة محلية؟ نزّل الملفات المتاحة حاليًا لدى SkillsMP.
Use this skill to create a Polymarket wallet for your agent and trade on prediction markets. Browse markets, place bets, manage positions — all without exposing private keys.
ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.
Automated daily security audits for OpenClaw agents with email reporting. Runs deep audits and sends formatted reports.
استنادا إلى تصنيف SOC المهني
عرض SKILL.md
| name | context-verifier |
| version | 1.5.1 |
| description | Know the file you're editing is the file you think it is — verify integrity before you act |
| author | Live Neon <contact@liveneon.dev> |
| homepage | https://github.com/live-neon/skills/tree/main/agentic/context-verifier |
| repository | leegitw/context-verifier |
| license | MIT |
| tags | ["agentic","verification","integrity","validation","checksums","drift-detection","state","file-verification"] |
| layer | foundation |
| status | active |
| alias | cv |
| metadata | {"openclaw":{"requires":{"config":[".openclaw/context-verifier.yaml",".claude/context-verifier.yaml"],"workspace":["output/context-packets/"]}}} |
Unified skill for file hash computation, integrity verification, severity tagging, and context packet creation. Consolidates 3 granular skills into a single verification system.
Trigger: 明示呼出 (explicit invocation)
Source skills: context-packet, file-verifier, severity-tagger
openclaw install leegitw/context-verifier
Dependencies: None (foundational skill)
Standalone usage: This skill is fully functional standalone. It provides file integrity verification that other skills in the suite depend on. Install this first when adopting the Neon Agentic Suite.
Data handling: This skill performs local-only operations. Hash computation uses standard
SHA256 algorithms locally — no file contents are sent to any model, API, or external service.
Results are written to output/context-packets/ in your workspace. The skill reads config from
.openclaw/context-verifier.yaml or .claude/context-verifier.yaml only.
File access scope: This skill reads user-specified files for hash computation. The metadata
declares config and output paths only — the skill will read ANY file path you provide to
/cv hash, /cv verify, or /cv packet. Use caution with sensitive files.
AI agents sometimes operate on stale data — editing a file that changed since it was read, or trusting cached content that's now outdated. This skill prevents that by:
The insight: Trust but verify. The file you read might not be the file you're about to edit. Check first.
/cv <sub-command> [arguments]
| Command | CJK | Logic | Trigger |
|---|---|---|---|
/cv hash | 哈希 | file→SHA256(content) | Explicit |
/cv verify | 検証 | file×hash→match✓∨mismatch✗ |
| Explicit |
/cv tag | 標記 | file→severity∈{critical,important,minor} | Explicit |
/cv packet | 包装 | files[]→{path,hash,severity,timestamp}[] | Explicit |
| Argument | Required | Description |
|---|---|---|
| file | Yes | File path to hash |
| --algorithm | No | Hash algorithm: sha256 only (MD5/SHA-1 removed - cryptographically broken) |
| Argument | Required | Description |
|---|---|---|
| file | Yes | File path to verify |
| hash | Yes | Expected hash value |
| --algorithm | No | Hash algorithm: sha256 only |
| Argument | Required | Description |
|---|---|---|
| file | Yes | File path to tag |
| severity | No | Severity level: critical, important, minor (auto-detected if omitted) |
| Argument | Required | Description |
|---|---|---|
| files | Yes | Comma-separated file paths or glob pattern |
| --name | No | Packet name (default: auto-generated) |
| --include-content | No | Include file content in packet (default: false) - see Security section |
⚠️ Security Warning: The
--include-contentflag stores file contents to disk. Never use this flag with sensitive files (.env, credentials, secrets). See the Security Considerations section below.
Configuration is loaded from (in order of precedence):
.openclaw/context-verifier.yaml (OpenClaw standard).claude/context-verifier.yaml (Claude Code compatibility)Local-only processing: All hash computation uses standard SHA256 algorithms executed locally. No file contents are ever sent to any LLM, API, or external service. The "agent's model" is only used to interpret your commands — not to process file contents.
What this skill does NOT do:
output/context-packets/)What this skill accesses:
.openclaw/context-verifier.yaml and .claude/context-verifier.yamloutput/context-packets/ (write)⚠️ IMPORTANT: Unlike other skills in this suite, context-verifier reads arbitrary files that
you specify. The metadata only declares config/output paths. When you run /cv hash myfile.go,
the skill reads myfile.go even though it's not in the metadata. This is by design — verification
requires reading the files you want to verify.
This skill handles file metadata and optionally file contents. Follow these guidelines:
The critical_patterns (e.g., *.env, *credentials*, *secret*) are used for:
By default, /cv hash and /cv packet compute hashes without reading file contents into output.
The hash is computed but the file content is not stored.
⚠️ WARNING: The --include-content flag writes actual file contents to disk.
| Risk | Mitigation |
|---|---|
| Secrets written to disk | Never use --include-content with .env, credentials, or secret files |
| Sensitive data in git | Add output/context-packets/ to .gitignore (see below) |
| Data retention | Packets are stored indefinitely; manually delete when no longer needed |
Recommended usage:
# Safe: Hash only (default) - no content stored
/cv packet src/*.go --name "pre-refactor"
# Risky: Content included - ensure no sensitive files in glob
/cv packet docs/*.md --name "docs-backup" --include-content
# NEVER do this:
/cv packet .env --include-content # Stores secrets to disk!
Add to your .gitignore to prevent accidental commits:
# Context verification packets (may contain sensitive data)
output/context-packets/
output/context-packets/ (workspace-local)For sensitive environments, consider:
output/ directory permissionsThis skill is developed by Live Neon (https://github.com/live-neon/skills) and published
to ClawHub under the leegitw account. Both refer to the same maintainer.
Default algorithm: SHA-256
hash(file) = SHA256(file.content)
Files are auto-classified based on configurable patterns:
| Severity | Default Patterns | Behavior on Change |
|---|---|---|
| critical | *.env, *credentials*, *secret*, project config | Block operation |
| important | *.go, *.ts, *.md (in docs/) | Warn user |
| minor | *.log, *.tmp, output/* | Info only |
Critical file patterns are configurable via .openclaw/context-verifier.yaml:
# .openclaw/context-verifier.yaml
critical_patterns:
- "*.env"
- "*credentials*"
- "*secret*"
- "CLAUDE.md" # Claude Code projects
- "AGENTS.md" # OpenClaw projects
- "pyproject.toml" # Python projects
- "Cargo.toml" # Rust projects
{
"id": "PKT-20260215-001",
"created": "2026-02-15T10:30:00Z",
"files": [
{
"path": "src/main.go",
"hash": "abc123...",
"severity": "important",
"size": 1234,
"modified": "2026-02-15T10:00:00Z"
}
],
"metadata": {
"purpose": "pre-refactor snapshot",
"creator": "context-verifier"
}
}
[HASH] src/main.go
Algorithm: SHA-256
Hash: a1b2c3d4e5f6...
Size: 1,234 bytes
Modified: 2026-02-15 10:00:00
[VERIFY] src/main.go
Status: ✓ MATCH
Expected: a1b2c3d4e5f6...
Actual: a1b2c3d4e5f6...
[VERIFY] src/main.go
Status: ✗ MISMATCH
Expected: a1b2c3d4e5f6...
Actual: x9y8z7w6v5u4...
WARNING: File has changed since last read.
Action: Re-read file before making changes.
[TAG] src/main.go
Severity: important
Reason: Go source file
Behavior: Warn on unexpected change
[PACKET CREATED]
ID: PKT-20260215-001
Files: 4
Total size: 10,234 bytes
Files included:
- src/main.go (important) - a1b2c3...
- src/handler.go (important) - d4e5f6...
- docs/README.md (important) - j0k1l2...
- config/settings.yaml (important) - m3n4o5...
Stored: output/context-packets/PKT-20260215-001.json
Note: Avoid including sensitive files (
.env, credentials) in packets. Use specific globs likesrc/*.gorather than*to exclude secrets.
| Condition | Behavior |
|---|---|
| File not found | Error: "File not found: {path}" |
| Permission denied | Error: "Cannot read file: {path}" |
| Invalid hash format | Error: "Invalid hash format. Expected: {algorithm}" |
| Glob matches no files | Warning: "No files match pattern: {glob}" |
After invoking this skill:
| Condition | Action |
|---|---|
| Hash mismatch | Alert user, suggest re-read of file |
| Critical file changed | Block operation, require verification |
| Packet created | Store in output/context-packets/ for audit |
This skill reads/writes:
output/
└── context-packets/
└── PKT-YYYYMMDD-XXX.json
/cv hash src/main.go
# Save hash: a1b2c3d4e5f6...
# ... later, before editing ...
/cv verify src/main.go a1b2c3d4e5f6
# ✓ MATCH - safe to edit
/cv packet src/*.go,internal/**/*.go --name "pre-refactor"
# Creates packet with all Go files
# ... after refactoring ...
# Can compare against packet to see what changed
/cv tag .env
# Severity: critical
/cv tag src/handler.go
# Severity: important
/cv packet db/migrations/*.sql --name "pre-deploy-migrations"
# Creates packet with all migration files
# After staging deployment...
/cv verify db/migrations/001_users.sql abc123...
# ✓ MATCH - migration file unchanged, safe to deploy to production
/cv packet api/schemas/*.json,api/openapi.yaml --name "api-schema-v2"
# Creates packet with all API schema files for version control
/cv hash computes SHA-256 hash of file/cv verify compares file hash against expected value/cv verify clearly indicates match/mismatch/cv tag auto-classifies file severity based on patterns/cv tag allows manual severity override/cv packet creates JSON packet with file metadata/cv packet supports glob patternsConsolidated from 3 skills as part of agentic skills consolidation (2026-02-15).