xmtp-comms-guard

Enforce guarded XMTP client usage and block raw client imports.

19|4|Updated Apr 10, 2026

Search Tags:#messaging #security #middleware #xmtp #trust framework #audit chain #nonce replay

Ready to run

npx skills add https://github.com/profbernardoj/morpheus-skill --skill xmtp-comms-guard-profbernardoj

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: xmtp-comms-guard
Source: https://github.com/profbernardoj/morpheus-skill/tree/main/skills/xmtp-comms-guard
Command: npx skills add https://github.com/profbernardoj/morpheus-skill --skill xmtp-comms-guard-profbernardoj

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill prevents unsafe XMTP communication by enforcing a guarded client workflow, blocking raw client imports, and applying deterministic security checks before messages are delivered.

Core Features & Use Cases

Guarded Messaging Enforcement: Routes all XMTP traffic through createGuardedXmtpClient so agents cannot bypass the approved middleware path.
Deterministic Security Pipeline: Validates schema, message size, nonce freshness, peer authorization, rate limits, PII exposure, prompt injection, and trust context in a fixed fail-closed order.
Operational Security Workflows: Supports peer revocation, key rotation review, handshake verification, and audit-chain integrity checks for production messaging systems.

Quick Start

Ask the AI to integrate xmtp-comms-guard into an XMTP messaging flow and enforce guarded client usage for all inbound and outbound communication.

Frequently Asked Questions about xmtp-comms-guard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enforce security checks before delivering XMTP messages?▼

To prevent nonce replay attacks in XMTP messaging, the middleware applies deterministic nonce freshness checks within a fixed fail-closed security pipeline before any message is delivered to the peer.

Can I block raw XMTP client imports to stop agents from bypassing security middleware?▼

You can block raw XMTP client imports by enforcing a guarded client workflow that requires all agent communication to route through the approved middleware path, preventing unauthorized bypasses of the security pipeline.

How do I handle peer revocation and key rotation review in an XMTP messaging integration?▼

Handling peer revocation and key rotation review in XMTP messaging involves applying operational security workflows that verify handshakes, enforce peer registry checks, and validate trust contexts before allowing communication.

Does XMTP messaging support fail-closed PII scanning and prompt injection detection?▼

XMTP messaging supports fail-closed PII scanning and prompt injection detection through a deterministic security pipeline that validates message content, rate limits, and trust context in a fixed order before delivery.

When do I need audit chain integrity checks for XMTP communication?▼

You need audit chain integrity checks for XMTP communication when operating production messaging systems that require fail-closed hash-chain validation to verify the operational security of peer interactions and message delivery.