agentguard

Audit AI agent code and runtime actions for security risks.

2|1|Updated Feb 13, 2026
One-click install
npx skills add https://github.com/simplefarmer69/ape-claw --skill agentguard-simplefarmer69
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: agentguard
Source: https://github.com/simplefarmer69/ape-claw/tree/main/data/forge-skills/clawhub-security
Command: npx skills add https://github.com/simplefarmer69/ape-claw --skill agentguard-simplefarmer69

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @goplus/agentguard-cli, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill acts as an AI security auditor, automatically identifying and blocking dangerous commands, preventing data leaks, and protecting sensitive secrets before they can be exploited.

Core Features & Use Cases

  • Security Auditing: Scans code and actions for vulnerabilities like command execution, remote loading, and secret exposure.
  • Runtime Protection: Evaluates proposed actions (network requests, file operations, web3 transactions) for safety.
  • Trust Management: Manages a registry of trusted skills and their capabilities.
  • Use Case: Before executing a newly discovered skill, use agentguard scan to audit its code for potential risks, then use agentguard action to evaluate if it's safe to allow it to access your network.

Quick Start

Scan the current directory for security risks using the agentguard skill.

Frequently Asked Questions about agentguard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit AI agent runtime actions for security vulnerabilities?

You can audit AI agent runtime actions for security vulnerabilities by scanning codebases and evaluating proposed network requests, file operations, and web3 transactions using configurable protection levels. This identifies malicious commands and prevents data leaks before execution.

What is AI agent runtime protection and how does it prevent secret exposure?

AI agent runtime protection is a mechanism that evaluates proposed actions for safety before execution. It prevents secret exposure and data leaks by auditing code for command execution risks, remote loading, and unauthorized network access using the GoPlus AgentGuard framework.

How do I scan a newly discovered skill for malicious commands before execution?

To scan a newly discovered skill for malicious commands before execution, run a security audit on the current directory. This evaluates the skill's code for potential risks like command execution and secret exposure, then checks if it is safe to access your network.

Does agentguard support web3 transaction safety checks?

Yes, agentguard supports web3 transaction safety checks. It evaluates proposed web3 transactions for safety risks alongside command execution, network requests, and file operations using configurable protection levels to manage skill trust and capabilities.

Can I configure trust levels for different AI agent skills?

Yes, you can configure trust levels for different AI agent skills. The framework manages a registry of trusted skills and their capabilities, allowing you to set configurable protection levels for command execution, network access, and file operations.

What are the limitations of using agentguard for codebase security auditing?

Agentguard for codebase security auditing requires the @goplus/agentguard-cli dependency and focuses on command execution, remote loading, and secret exposure. It evaluates runtime actions but requires proper configuration of protection levels to avoid blocking legitimate agent workflows.