gatewaystack-governance
Deny-by-default governance for every tool call — identity, scope, rate limiting, injection detection, audit.
Setup & Installation
Install command
clawhub install davidcrowe/gatewaystack-governanceIf the CLI is not installed:
Install command
npx clawhub@latest install davidcrowe/gatewaystack-governanceOr install with OpenClaw CLI:
Install command
openclaw skills install davidcrowe/gatewaystack-governanceor paste the repo link into your assistant's chat
Install command
https://github.com/openclaw/skills/tree/main/skills/davidcrowe/gatewaystack-governanceWhat This Skill Does
Deny-by-default governance layer for OpenClaw that intercepts every tool call before execution. Runs five mandatory checks: identity verification, scope enforcement, rate limiting, prompt injection detection, and audit logging. Three optional features add output DLP, human escalation, and behavioral monitoring.
Because it hooks at the process level, the agent cannot route around it the way it could with in-prompt or middleware-based guardrails.
When to Use It
- Blocking an agent from calling tools outside its approved scope
- Detecting prompt injection attempts before a tool executes
- Reviewing audit logs after an unexpected agent action
- Redacting PII from tool output before it reaches the agent
- Triggering human review when an agent tries a tool for the first time
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Blocking an agent from calling tools outside its approved scope
- 1Blocking an agent from calling tools outside its approved scope
- 2Detecting prompt injection attempts before a tool executes
- 3Reviewing audit logs after an unexpected agent action
- 4Redacting PII from tool output before it reaches the agent
- 5Triggering human review when an agent tries a tool for the first time
Deny-by-default governance for every tool call — identity, scope, rate limiting, injection detection, audit.
Security Audits
These signals reflect official OpenClaw status values. A Suspicious status means the skill should be used with extra caution.