Initial commit: custom OpenClaw skills from docker-test

- workspace: capmetro-monitor, github-notifications, model-selector
- workspace-security: vt-monitor, monitor-unauthorized
- workspace-home: cron-manager, monitor-unauthorized
- extensions: vt-sentinel (VT-Sentinel plugin)

Includes sync.sh for pull/push, README, AGENTS.md, .gitignore.

AGENTS.md

@@ -0,0 +1,41 @@
+# OpenClaw Skills — Agent Guidance
+
+This repository is a **sync target** for custom OpenClaw skills from `docker-test:/opt/openclaw`. It is not the canonical source for runtime — docker-test is. This repo provides backup, version control, and a safe place to edit skills before pushing.
+
+## For AI Agents
+
+### What This Repo Is
+
+- A mirror of custom skills (workspace, workspace-security, workspace-home, extensions)
+- Skills here are **not** part of OpenClaw's built-in defaults or ClawHub's public registry
+- Structure mirrors remote paths: `workspace/`, `workspace-security/`, `workspace-home/`, `extensions/`
+
+### What to Do
+
+1. **Syncing**: Use `./sync.sh pull` to fetch latest from docker-test. Use `./sync.sh push` to deploy local changes.
+2. **Editing skills**: Modify `SKILL.md` and scripts in the appropriate directory. Follow existing skill structure.
+3. **Never commit**: `state.json`, `seen-connections.json`, `authorized-ips.json`, `memory/` — these are runtime/token/cache data.
+4. **Testing**: After `./sync.sh push`, the user must restart OpenClaw or start a new session for changes to take effect.
+
+### Key Paths
+
+| Local | Remote |
+|-------|--------|
+| `workspace/*` | `/opt/openclaw/workspace/skills/*` |
+| `workspace-security/*` | `/opt/openclaw/state/workspace-security/skills/*` |
+| `workspace-home/*` | `/opt/openclaw/state/workspace-home/skills/*` |
+| `extensions/*` | `/opt/openclaw/state/extensions/openclaw-plugin-vt-sentinel/skills/*` |
+
+### Sync Script
+
+- `./sync.sh pull` — Download from docker-test (default)
+- `./sync.sh push` — Upload to docker-test
+- `REMOTE=host ./sync.sh pull` — Use different SSH host
+
+Uses `scp` (rsync is not available on docker-test).
+
+### Project Conventions
+
+- Refer to `/home/b3nw/projects/AGENTS.md` for global agent entry point
+- User prefers SSH git remotes; origin is `gitea@git.local.ben.io:b3nw/openclaw-skills.git`
+- Do not add token, cache, or planning files to git