agent-access-control

Enforce tiered contact permissions and owner approval workflows for AI agent messaging.

Updated Apr 8, 2026
One-click install
npx skills add https://github.com/LudwigAJ/swell --skill agent-access-control
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: agent-access-control
Source: https://github.com/LudwigAJ/swell/tree/main/.factory/skills/agent-access-control
Command: npx skills add https://github.com/LudwigAJ/swell --skill agent-access-control

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you protect an AI agent from unknown or unwanted contacts by defining clear access tiers, owner approval flows, and safe default behavior for strangers.

Core Features & Use Cases

  • Tiered permissions: Separate owners, trusted contacts, chat-only users, and blocked senders with different capabilities.
  • Stranger deflection and approval: Send a diplomatic first response, notify the owner, and let the owner approve, restrict, or block the contact.
  • Multi-platform handling: Normalize IDs and enforce the same policy across WhatsApp, Telegram, Discord, Signal, and similar messaging channels.
  • Safety controls: Apply per-tier rate limits, audit logging, and strict tool restrictions to reduce abuse and protect private data.

Quick Start

Ask the Skill to set up a memory-backed access-control policy for your AI agent, including owner IDs, stranger messaging, approval handling, and rate limits.

Frequently Asked Questions about agent-access-control

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I control who can send messages to my AI agent?

To control messaging access for an AI agent, you can enforce tiered contact permissions and owner approval workflows. This secures the agent by separating owners, trusted contacts, and blocked senders with different capabilities.

How does stranger deflection work for AI agents on messaging platforms?

Stranger deflection sends a diplomatic first response to unknown contacts, notifies the owner, and allows the owner to approve, restrict, or block the sender. This ensures unknown users cannot interact without explicit permission.

Can I apply access control policies across WhatsApp, Telegram, and Discord?

Yes, multi-platform handling normalizes sender IDs across channels like WhatsApp, Telegram, and Discord. This enforces the same access control policy and tiered permissions consistently regardless of the messaging platform used.

How do I set up an approval workflow for unknown contacts reaching my AI agent?

You set up an approval workflow by creating a memory-backed JSON policy that defines owner IDs and stranger messaging rules. When an unknown sender appears, the system deflects them and prompts the owner for approval.

What are the best ways to prevent unwanted contacts from accessing AI agent tools?

You prevent unwanted access by applying per-tier rate limits, audit logging, and strict tool restrictions. These safety controls reduce abuse and protect private data by limiting what untrusted senders can do.

Do I need a JSON policy to enforce rate limiting and audit logging for my AI agent?

Yes, a memory-backed JSON policy is required to enforce per-tier rate limiting and audit logging. This policy stores normalized sender IDs, access tiers, and privacy restrictions to strictly manage agent interactions.