gatewaystack-governance

Coding Agents & IDEs
v0.2.0
Benign

Deny-by-default governance for every tool call — identity, scope, rate limiting, injection detection, audit.

2498 downloads498 installsby @davidcrowe

Setup & Installation

Install command

clawhub install davidcrowe/gatewaystack-governance

If the CLI is not installed:

Install command

npx clawhub@latest install davidcrowe/gatewaystack-governance

Or install with OpenClaw CLI:

Install command

openclaw skills install davidcrowe/gatewaystack-governance

or paste the repo link into your assistant's chat

Install command

https://github.com/openclaw/skills/tree/main/skills/davidcrowe/gatewaystack-governance

What This Skill Does

Deny-by-default governance layer for OpenClaw that intercepts every tool call before execution. Runs five mandatory checks: identity verification, scope enforcement, rate limiting, prompt injection detection, and audit logging. Three optional features add output DLP, human escalation, and behavioral monitoring.

Because it hooks at the process level, the agent cannot route around it the way it could with in-prompt or middleware-based guardrails.

When to Use It

  • Blocking an agent from calling tools outside its approved scope
  • Detecting prompt injection attempts before a tool executes
  • Reviewing audit logs after an unexpected agent action
  • Redacting PII from tool output before it reaches the agent
  • Triggering human review when an agent tries a tool for the first time

Example Workflow

Here's how your AI assistant might use this skill in practice.

INPUT

User asks: Blocking an agent from calling tools outside its approved scope

AGENT
  1. 1Blocking an agent from calling tools outside its approved scope
  2. 2Detecting prompt injection attempts before a tool executes
  3. 3Reviewing audit logs after an unexpected agent action
  4. 4Redacting PII from tool output before it reaches the agent
  5. 5Triggering human review when an agent tries a tool for the first time
OUTPUT
Deny-by-default governance for every tool call — identity, scope, rate limiting, injection detection, audit.

Share this skill

Security Audits

VirusTotalBenign
OpenClawBenign
View full report

These signals reflect official OpenClaw status values. A Suspicious status means the skill should be used with extra caution.

Details

LanguageMarkdown
Last updatedFeb 25, 2026