agentguard SKILL.md skillC
agentguard from goplussecurity/agentguard is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add goplussecurity/agentguard/agentguard@v1.1Pins v1.1 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- C, 15 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- goplussecurity/agentguard
- Path
skills/agentguard/SKILL.md- Versions recorded
- 8
- Latest version
- v1.1, committed Oct 19, 2026
- First version recorded
- Jun 4, 2026
- Size
- 75,953 bytes
- Repository stars
- 486
- License
- MIT
GoPlus AgentGuard — AI agent security guard. Run /agentguard checkup for a full security health check, scans all installed skills, checks credentials, permissions, and network exposure, then delivers an HTML report directly to you. Also use for scanning third-party code, blocking dangerous commands, preventing data leaks, evaluating action safety, and running daily security patrols.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# GoPlus AgentGuard — AI Agent Security Framework You are a security auditor powered by the GoPlus AgentGuard framework. Route the user's request based on the first argument. ## Important: Resolving Script Paths All commands in this skill reference `scripts/` as a relative path. You **MUST** resolve this to the absolute path of this skill's directory before running any command. To find the skill directory: 1. This SKILL.md file's parent directory **is** the skill directory 2. If this file is at `/path/to/agentguard/SKILL.md`, then scripts are at `/path/to/agentguard/scripts/` 3. Before running any `node scripts/...` command, **always `cd` into the skill directory first**, or use the full absolute path Example: if this SKILL.md is at `~/.openclaw/skills/agentguard/SKILL.md`, run: ```bash cd ~/.openclaw/skills/agentguard && node scripts/checkup-report.js ``` ## Command Routing ### Post-Install Guidance When AgentGuard has just been installed, or the user asks what to do next after installing AgentGuard, recommend the required setup step below instead of deriving a longer list from every supported command: ```bash agentguard init --agent auto ``` …
Read the whole file at its exact version.
How to install
mdr add goplussecurity/agentguard/agentguard@sha256:457c318ef094e77eThe line at the top of this page pins the label v1.1, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_izmgygtgpncifwt7)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 8 versions of this file, between Jun 4, 2026 and Oct 19, 2026, about one every 20 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.1 latest | 2026-10-19 | 29d1e78 | 75,953 B | C | view · diff |
| v1.1 | 2026-09-25 | e00b817 | 75,671 B | C | view · diff |
| v1.1 | 2026-09-21 | 107893e | 75,344 B | C | view · diff |
| v1.1 | 2026-09-10 | 9363ddf | 74,886 B | C | view · diff |
| v1.1 | 2026-09-04 | 8854b58 | 69,738 B | C | view · diff |
| v1.1 | 2026-09-02 | 4813b21 | 68,720 B | C | view · diff |
| v1.1 | 2026-09-02 | ac38fc5 | 68,598 B | C | view · diff |
| v1.1 | 2026-06-04 | 9828ca5 | 67,040 B | C | view |
Audit of the latest version
- fail: No curl or wget piped into a shell (matched: curl|bash)
- fail: No recursive delete of root, home or parent (matched: rm -rf / )
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (75953 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
goplussecurity/agentguard · 486 stars · license MIT · pushed 2026-10-19 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_izmgygtgpncifwt7 GET https://markdownregistry.com/api/v1/resolve?ref=goplussecurity/agentguard/agentguard GET https://markdownregistry.com/api/v1/blob/457c318ef094e77e8cae0c10a7bcdd5a6eaa463dd60214b56e5327f08657bcdf
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.