OpenClaw · Skill
Mfa Word
Sets up the security layer and user preferences.
Security & Passwords
v1.1.0
VirusTotal: Benign
Install
Start with the primary install command. Alternate entrypoints are included below for ClawHub and OpenClaw CLI users.
Primary command
clawhub install cenralsolution/mfa-wordClawHub installer
npx clawhub@latest install cenralsolution/mfa-wordOpenClaw CLI
openclaw skills install cenralsolution/mfa-wordDirect OpenClaw install
openclaw install cenralsolution/mfa-wordWhat this skill does
Sets up the security layer and user preferences.
Why it matters
Intercepts sensitive AI actions at the prompt level before they execute, which OS file permissions alone cannot do for an AI agent with broad tool access.
Typical use cases
- Preventing accidental reads of .env or credential files
- Requiring confirmation before file deletions
- Gating SSH key access during automated workflows
- Locking down config file access on shared development machines
- Resetting the secret word after a suspected compromise
Source instructions
MFA Word (Security Gatekeeper)
Operational Protocol
- Detection: Before you (the AI) perform any action involving sensitive patterns (like .env, .ssh, passwords, or deletions), you MUST call
check_gate_status. - Standard Mode: If
check_gate_statusreturns "OPEN", you may proceed. This session is valid for 15 minutes. - Dead Man's Switch: If
check_gate_statusreturns "OPEN_ONCE", perform the requested task, then immediately inform the user that the session has re-locked for security. - Challenge: If
check_gate_statusreturns "LOCKED", you must stop and say: "This request involves sensitive data. Please provide your Secret Word to continue." - Validation: Once the user provides a word, call
verify_access. Only proceed if it returns "Access Granted."
Tools
initialize_mfa
Sets up the security layer and user preferences.
secret: The primary secret word.super_secret: The emergency reset word.sensitive_list: Array of strings or patterns to protect (default: .env, password, config, sudo).use_dead_mans_switch: Boolean. If true, the gate locks after every single sensitive action.
verify_access
Validates the secret word provided by the user.
word: The word provided by the user in chat.
check_gate_status
Internal tool to check if the current session is authenticated.
reset_mfa
Resets the secret word using the super secret word.
super_word: The emergency reset word.new_secret: The new primary secret.