upss-security-guard

Name: upss-security-guard
Availability: InStock
Author: upss-standard

Validate prompts through a 6-gate security pipeline before LLM execution.

8|Updated Oct 29, 2025

Search Tags:#rbac #OpenClaw #prompt-security #audit-log #runtime-security #upss #6-gate

Ready to run

npx skills add https://github.com/upss-standard/universal-prompt-security-standard --skill upss-security-guard

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: upss-security-guard
Source: https://github.com/upss-standard/universal-prompt-security-standard/tree/main
Command: npx skills add https://github.com/upss-standard/universal-prompt-security-standard --skill upss-security-guard

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires openssl, sqlite3, sha256sum, and includes scripts (resource) components.

What problem does it solve?

High-risk prompts escaping security controls are a major risk in AI systems; UPSS Security Guard provides a runtime 6-gate protection layer that intercepts prompts and enforces strict controls before any LLM call.

Core Features & Use Cases

6-Gate Runtime Security: blocks prompt injection, jailbreaking attempts, role confusion, and secret data leakage at runtime.
RBAC and Audit Trails: enforces least-privilege access and logs every prompt evaluation for compliance.
OpenClaw Integration: seamless protection with the UPSS OpenClaw plugin, applicable to agent prompts and tool inputs.

Quick Start

Load the UPSS Security Guard into your agent runtime and initialize the 6-gate checks so that every prompt is validated before LLM execution.

Frequently Asked Questions about upss-security-guard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I prevent prompt injection and jailbreaking in LLM agent workflows?▼

Preventing prompt injection requires a runtime 6-gate security pipeline that intercepts and validates every prompt before LLM execution. This approach blocks malicious attempts, role confusion, and secret data leakage automatically during agent operations.

How does runtime prompt validation work for agent tools?▼

Runtime prompt validation applies security checks across agent prompts, tool inputs, and generated instructions before execution. It uses pluggable primitives like BasicSanitizer and InputValidator to enforce strict controls automatically within frameworks like OpenClaw.

Can I enforce RBAC and audit logging for LLM prompts?▼

Yes, you can enforce RBAC and audit logging for LLM prompts to maintain least-privilege access and compliance. The security pipeline logs every prompt evaluation, providing a clear audit trail of all runtime validations and policy enforcement actions.

Does OpenClaw support automatic security policy enforcement for tool inputs?▼

OpenClaw supports automatic security policy enforcement through a dedicated plugin that protects both agent prompts and tool inputs. This integration applies the 6-gate validation pipeline seamlessly across your existing agent framework operations.

Do I need sqlite3 and openssl to run prompt security checks?▼

Yes, you need sqlite3, openssl, and sha256sum as dependencies to run these prompt security checks. These underlying tools support the local audit logging, cryptographic verification, and data integrity required by the runtime security pipeline.

What are the limitations of lightweight runtime prompt auditing?▼

Lightweight runtime prompt auditing focuses on intercepting known high-risk patterns like prompt injection rather than deep semantic analysis. It relies on pluggable primitives like LightweightAuditor and SimpleRBAC to enforce strict policy controls without heavy computational overhead.