Xpersona
agentCLAWHUBUnverified

Rune

Performs adversarial red-team analysis on approved plans to identify edge cases, security risks, scalability issues, error paths, and integration risks befor... Skill: Rune Owner: nhadaututtheky Summary: Performs adversarial red-team analysis on approved plans to identify edge cases, security risks, scalability issues, error paths, and integration risks befor... Tags: latest:2.32.0 Version history: v2.32.0 | 2026-08-16T06:43:26.740Z | user • chore: release v2.32.0 — Drawing the Mesh • chore: regenerate skill-index.json after docs→diagram link • fix: docs references diagram v

OpenClaw
View on ClawHubHomepage

Rank

62

Safety

84

Downloads

3.4k

Updated

Oct 9, 2026

Version

2.32.0

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 3.4K downloads reported by the source. Last updated 10/9/2026.

Avoid when

  • Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor
Clawhubvendor · observed Oct 9, 2026
Protocol compatibility
OpenClawcompatibility · observed Oct 9, 2026
Adoption signal
3.4K downloadsadoption · observed Oct 9, 2026
Latest release
2.32.0release · observed Aug 16, 2026
Handshake status
UNKNOWNsecurity

Install and run

Setup complexity: low.

clawhub skill install s175aq6qavk2a5dggrfwh08p6h83h13x:rune-kit
  1. Setup complexity is classified as HIGH. You must provision dedicated cloud infrastructure or an isolated VM. Do not run this directly on your local workstation.
  2. Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-nhadaututtheky-rune-kit/snapshot"

Documentation

CLAWHUB

160,000 characters of source documentation, loaded on request.

Extracted files

5 files captured from the source.

SKILL.md

# Rune

> Less skills. Deeper connections.

**67-skill mesh** for AI coding assistants — 5-layer architecture, 248 connections + 45 signals, 14 extension packs.

## Install

```
clawhub install rune-kit
```

Or via npm:

```
npx @rune-kit/rune init
```

## What is Rune?

Rune is a **mesh** — skills call each other bidirectionally, forming resilient workflows. If one skill fails, the mesh routes around it.

Use `rune:cook` for any code task, `rune:team` for parallel work, `rune:launch` for deploy, `rune:rescue` for legacy code.

## Architecture

| Layer | Role | Skills |
|-------|------|--------|
| L0 | Router | skill-router |
| L1 | Orchestrators | cook, launch, rescue, scaffold, team |
| L2 | Workflow Hubs | adversary, audit, autopsy, ba, brainstorm, db, debug, deploy, design, docs, fix, graft, improve-architecture, incident, logic-guardian, marketing, mcp-builder, onboard, perf, plan, preflight, retro, review-intake, review, safeguard, scout, sentinel, skill-forge, surgeon, test |
| L3 | Utilities | asset-creator, browser-pilot, completion-gate, constraint-check, context-engine, context-pack, converge, council, dependency-doctor, diagram, doc-processor, docs-seeker, git, hallucination-guard, integrity-check, journal, neural-memory, problem-solver, quarantine, research, sast, scope-guard, sentinel-env, sequential-thinking, session-bridge, slides, trend-scout, verification, video-creator, watchdog, worktree |
| L4 | Extensions | 14 domain packs |

## Extension Packs (L4)

ui · backend · devops · mobile · security · trading · saas · ecommerce · ai-ml · gamedev · content · analytics · chrome-ext · zalo

## Links

- **Source**: [github.com/rune-kit/rune](https://github.com/rune-kit/rune)
- **Docs**: [rune-kit.github.io/rune](https://rune-kit.github.io/rune)
- **Guides**: [rune-kit.github.io/rune/guides](https://rune-kit.github.io/rune/guides)

## License

MIT — v2.32.0

README.md

# Rune

> Less skills. Deeper connections.

**67-skill mesh** for AI coding assistants — 5-layer architecture, 248 connections + 45 signals, 14 extension packs.

## Install

```
clawhub install rune-kit
```

Or via npm:

```
npx @rune-kit/rune init
```

## What is Rune?

Rune is a **mesh** — skills call each other bidirectionally, forming resilient workflows. If one skill fails, the mesh routes around it.

Use `rune:cook` for any code task, `rune:team` for parallel work, `rune:launch` for deploy, `rune:rescue` for legacy code.

## Architecture

| Layer | Role | Skills |
|-------|------|--------|
| L0 | Router | skill-router |
| L1 | Orchestrators | cook, launch, rescue, scaffold, team |
| L2 | Workflow Hubs | adversary, audit, autopsy, ba, brainstorm, db, debug, deploy, design, docs, fix, graft, improve-architecture, incident, logic-guardian, marketing, mcp-builder, onboard, perf, plan, preflight, retro, review-intake, review, safeguard, scout, sentinel, skill-forge, surgeon, test |
| L3 | Utilities | asset-creator, browser-pilot, completion-gate, constraint-check, context-engine, context-pack, converge, council, dependency-doctor, diagram, doc-processor, docs-seeker, git, hallucination-guard, integrity-check, journal, neural-memory, problem-solver, quarantine, research, sast, scope-guard, sentinel-env, sequential-thinking, session-bridge, slides, trend-scout, verification, video-creator, watchdog, worktree |
| L4 | Extensions | 14 domain packs |

## Extension Packs (L4)

ui · backend · devops · mobile · security · trading · saas · ecommerce · ai-ml · gamedev · content · analytics · chrome-ext · zalo

## Links

- **Source**: [github.com/rune-kit/rune](https://github.com/rune-kit/rune)
- **Docs**: [rune-kit.github.io/rune](https://rune-kit.github.io/rune)
- **Guides**: [rune-kit.github.io/rune/guides](https://rune-kit.github.io/rune/guides)

## License

MIT — v2.32.0

_meta.json

{
  "ownerId": "kn70ngajsmd3pjtems7xrs3kv580v8fj",
  "slug": "rune-kit",
  "version": "2.32.0",
  "publishedAt": 1786862606740
}

skill-card.md

## Description:

Rune is a 67-skill mesh for AI coding assistants that routes coding, review, deployment, security, documentation, and project-state workflows through connected specialist skills.

This skill is ready for commercial/non-commercial use.

## Publisher:

[nhadaututtheky](https://clawhub.ai/user/nhadaututtheky)

### License/Terms of Use:

MIT-0

## Use Case:

Developers and engineering teams use Rune to coordinate AI-assisted software work across implementation, planning, review, testing, deployment, security checks, documentation, and session continuity. It is most relevant when a coding assistant needs structured routing among many task-specific workflows.

### Deployment Geography for Use:

Global

## Known Risks and Mitigations:

Risk: The skill mesh can exert broad always-on influence over how an agent routes and performs coding sessions.

Mitigation: Review the routing skill and enable only the workflows needed for the repository before relying on it for sensitive work.

Risk: Auto-onboarding and session-continuity behavior can write persistent project files such as CLAUDE.md and .rune state.

Mitigation: Inspect generated project-state files, keep them under normal code review, and disable or remove persistence behavior where project policy does not allow it.

Risk: Memory and session capture can preserve project decisions, progress, or workflow preferences beyond a single interaction.

Mitigation: Avoid installing or invoking memory-related workflows on confidential repositories unless retention, access, and review expectations are clear.

Risk: The npm install path shown in artifact evidence uses npx without a pinned package version.

Mitigation: Pin package versions or install from a reviewed, checksummed release source before use in controlled environments.

## Reference(s):

- [ClawHub Rune Skill Page](https://clawhub.ai/nhadaututtheky/skills/rune-kit)
- [Artifact README](artifact/README.md)
- [Skill Index](artifact/skills/skill-index.json)
- [Rune Documentation](https://rune-kit.github.io/rune)
- [Rune Guides](https://rune-kit.github.io/rune/guides)

## Skill Output:

**Output Type(s):** [Text, Markdown, Code, Shell commands, Configuration, Guidance]

**Output Format:** [Markdown guidance with inline code blocks, command suggestions, file-change plans, and generated project-state or configuration files when invoked by an agent.]

**Output Parameters:** [1D]

**Other Properties Related to Output:** [Outputs may include routed workflow decisions, implementation steps, review findings, verification reports, and persistent project notes.]

## Skill Version(s):

2.32.0 (source: server release metadata)

## Ethical Considerations:

Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.

skills/rune-adversary.md

# rune-adversary

> Rune L2 Skill | quality | model: tier:heavy


# adversary

> **RUNE COMPLIANCE**: Before ANY code response, you MUST:
> 1. Classify this request (CODE_CHANGE | QUESTION | DEBUG | REVIEW | EXPLORE)
> 2. Route through the correct Rune skill (see skill-router routing table)
> 3. Follow the skill's workflow — do NOT freelance or skip steps
> Violation: writing code without skill routing = incorrect behavior.

## Platform Constraints

- SHOULD: Monitor your context usage. If working on a long task, summarize progress before context fills up.
- MUST: Before summarizing/compacting context, save important decisions and progress to project files.
- SHOULD: Before ending, save architectural decisions and progress to .rune/ directory for future sessions.

## Purpose

Pre-implementation adversarial analysis. After a plan is approved but BEFORE code is written, adversary stress-tests the plan across 5 dimensions: edge cases, security, scalability, error propagation, and integration risk. It does NOT fix or redesign — it reports weaknesses so the plan can be hardened before implementation begins.

This fills the only gap in the plan-to-ship pipeline: all other quality skills (review, preflight, sentinel) operate AFTER code exists. Catching a flaw in a plan costs minutes; catching it in implementation costs hours.

<HARD-GATE>
adversary MUST NOT approve a plan without at least one specific challenge per dimension analyzed.
A report that says "plan looks solid" without concrete attack vectors is NOT a red-team analysis.
Every finding MUST reference the specific plan section, file, or assumption it challenges.
</HARD-GATE>

## Triggers

- Called by `cook` Phase 2.5 — after plan approved, before Phase 3 (TEST)
- `/rune adversary` — manual red-team analysis of any plan or design document
- Auto-trigger: when plan files are created in `.rune/` or `docs/plans/`

## Calls (outbound)

- `sentinel` (L2): deep security scan when adversary identifies auth/crypto/payment attack vectors in the plan
- `perf` (L2): scalability analysis when adversary identifies potential bottleneck patterns
- `scout` (L2): find existing code that might conflict with planned changes
- `docs-seeker` (L3): verify framework/API assumptions in the plan are correct and current
- `hallucination-guard` (L3): verify that APIs, packages, or patterns referenced in the plan actually exist
- `context-engine` (L3): (oracle-mode) emit `context.preview` before bundle build to gate token cost
- `session-bridge` (L3): (oracle-mode) detach protocol when target model is opus-class for non-blocking dispatch
- `council` (L3): Step 0.6 — decorrelated multi-perspective critique for CRITICAL-tier plans (one-way-door decisions, auth/payment/crypto/user-data), mode=critique

## Called By (inbound)

- `cook` (L1): Phase 2.5 — after plan approval, before TDD
- `plan` (L2): optional post-step for critical features
- `team` (L1): when decomposing large tasks, adversary validates the decomposition
- `deb

Related agents

Same protocol, similar job.

Github ReposUpdated 5h agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW
Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW
Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.

MCPOPENCLAW
Github ReposUpdated 7mo agoRank 70

CopilotKit

The Frontend for Agents & Generative UI. React + Angular

OPENCLAW

Machine-readable data

The same record, as JSON, for agents and crawlers.

{
  "facts": [
    {
      "factKey": "vendor",
      "category": "vendor",
      "label": "Vendor",
      "value": "Clawhub",
      "href": "https://clawhub.ai/nhadaututtheky/skills/rune-kit",
      "sourceUrl": "https://clawhub.ai/nhadaututtheky/skills/rune-kit",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-10-09T08:30:50.863Z",
      "isPublic": true
    },
    {
      "factKey": "protocols",
      "category": "compatibility",
      "label": "Protocol compatibility",
      "value": "OpenClaw",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-nhadaututtheky-rune-kit/contract",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-nhadaututtheky-rune-kit/contract",
      "sourceType": "contract",
      "confidence": "medium",
      "observedAt": "2026-10-09T08:30:50.863Z",
      "isPublic": true
    },
    {
      "factKey": "traction",
      "category": "adoption",
      "label": "Adoption signal",
      "value": "3.4K downloads",
      "href": "https://clawhub.ai/nhadaututtheky/rune-kit",
      "sourceUrl": "https://clawhub.ai/nhadaututtheky/rune-kit",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-10-09T08:30:50.863Z",
      "isPublic": true
    },
    {
      "factKey": "latest_release",
      "category": "release",
      "label": "Latest release",
      "value": "2.32.0",
      "href": "https://clawhub.ai/nhadaututtheky/rune-kit",
      "sourceUrl": "https://clawhub.ai/nhadaututtheky/rune-kit",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-08-16T06:43:26.740Z",
      "isPublic": true
    },
    {
      "factKey": "handshake_status",
      "category": "security",
      "label": "Handshake status",
      "value": "UNKNOWN",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-nhadaututtheky-rune-kit/trust",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-nhadaututtheky-rune-kit/trust",
      "sourceType": "trust",
      "confidence": "medium",
      "observedAt": null,
      "isPublic": true
    }
  ],
  "events": [
    {
      "eventType": "release",
      "title": "Release 2.32.0",
      "description": "• chore: release v2.32.0 — Drawing the Mesh • chore: regenerate skill-index.json after docs→diagram link • fix: docs references diagram via rune:diagram so mesh orphan gate passes • chore: sync 67-skill / 46-signal counts across docs and manifests • fix(hooks): quarantine must be synchronous to inject additionalContext • chore: regenerate skill-index.json (diagram skill) • chore(diagram): tighten validator tolerances and a11y placeholder gate • chore(diagram): v0.3.0 changelog • docs(sentinel): offer diagram for paved-road figures • feat(diagram): v0.3.0 semantic patterns",
      "href": "https://clawhub.ai/nhadaututtheky/rune-kit",
      "sourceUrl": "https://clawhub.ai/nhadaututtheky/rune-kit",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-08-16T06:43:26.740Z",
      "isPublic": true
    }
  ]
}

Record generated Oct 10, 2026.

Sponsored

Ads related to Rune and adjacent AI workflows.