tinman

Scan AI sessions for security threats and classify failure modes.

Updated Feb 26, 2026
One-click install
npx skills add https://github.com/dfpalhano/openclaw-workspace --skill tinman-dfpalhano
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tinman
Source: https://github.com/dfpalhano/openclaw-workspace/tree/main/skills/agent-tinman
Command: npx skills add https://github.com/dfpalhano/openclaw-workspace --skill tinman-dfpalhano

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires AgentTinman>=0.2.1, tinman-openclaw-eval>=0.3.2, pyyaml>=6.0, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill proactively identifies and mitigates security risks and failure modes within AI agent interactions, protecting against prompt injection, tool misuse, and data exfiltration.

Core Features & Use Cases

  • Real-time Security Scanning: Analyzes tool calls and session activity for threats before they cause harm.
  • Proactive Threat Hunting: Runs synthetic attack probes to discover unknown vulnerabilities.
  • Failure Mode Analysis: Classifies and reports AI failures, suggesting specific mitigations.
  • Use Case: An AI agent is about to execute a command that could expose sensitive user data. Tinman intercepts this, flags it as a high-severity threat, and blocks the execution, preventing a data breach.

Quick Start

Run a security scan on recent AI sessions to identify potential failure modes.

Frequently Asked Questions about tinman

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect prompt injection and prevent tool misuse in AI agents?

AI security scanning intercepts and analyzes tool calls and session activity to detect prompt injection and tool misuse, blocking high-severity threats before execution. It classifies failures by severity and proposes mitigations using 168 detection patterns.

Can I run vulnerability scanning proactively to find unknown AI security flaws?

Vulnerability scanning proactively discovers unknown flaws by running 288 synthetic attack probes against your AI sessions. This threat hunting approach identifies potential failure modes and data exfiltration risks before they impact production.

What is the best way to analyze AI agent failure modes and classify their severity?

Failure mode analysis classifies AI agent failures by severity and suggests specific mitigations. By evaluating session activity against 168 detection patterns, it identifies security risks like data exfiltration and provides actionable prevention steps.

Does this AI security scanner support local event streaming for real-time tool call verification?

The AI security scanner supports local event streaming and agent self-protection through real-time tool call verification. It evaluates ongoing session activity to intercept malicious commands and prevent unauthorized data access during execution.

Do I need AgentTinman to verify AI tool calls and block malicious commands?

AgentTinman is required alongside tinman-openclaw-eval and pyyaml to enable tool call verification and block malicious commands. These dependencies provide the detection patterns and attack probes necessary for active failure prevention.