Initial commit: custom OpenClaw skills from docker-test

- workspace: capmetro-monitor, github-notifications, model-selector
- workspace-security: vt-monitor, monitor-unauthorized
- workspace-home: cron-manager, monitor-unauthorized
- extensions: vt-sentinel (VT-Sentinel plugin)

Includes sync.sh for pull/push, README, AGENTS.md, .gitignore.

workspace-security/vt-monitor/SKILL.md

@@ -0,0 +1,38 @@
+---
+name: vt-monitor
+description: >-
+  Monitor VT-Sentinel activity from gateway logs. Parses scan events, uploads,
+  verdicts, quarantines, blocks, and failures. Returns structured JSON of all
+  VT-Sentinel activity since last check.
+metadata:
+  openclaw:
+    emoji: "🛡️"
+---
+
+# VT-Sentinel Monitor
+
+Parses the OpenClaw gateway log for all VT-Sentinel activity and returns structured reports.
+
+## Available Tools
+
+### `vt_monitor_check` — Check Recent Activity
+Returns all VT-Sentinel events since last check (or last N minutes).
+
+```
+vt_monitor_check [minutes]
+```
+
+Arguments:
+- `minutes` (optional, default: 60) — How far back to look
+
+Output: JSON with categorized events (scans, uploads, verdicts, blocks, quarantines, failures).
+
+### `vt_monitor_tail` — Live Tail
+Returns the last N VT-Sentinel log entries.
+
+```
+vt_monitor_tail [count]
+```
+
+Arguments:
+- `count` (optional, default: 50) — Number of recent entries