How do I install the Guards And Wards skill?

Run npx skillmds@latest add hmbown/guards-and-wards in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Guards And Wards safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Guards And Wards?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Guards And Wards free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Guards And Wards?

Hmbown (@hmbown) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Guards And Wards by hmbown — Agent Skill

Name: Guards And Wards
Author: Hmbown

Guards And Wards

In D&D, Guards and Wards fills an area with layered minor defenses — fog, locked doors, illusory walls, confusion effects — that individually are trivial but collectively make navigation exhausting. The real-world version is defense in depth through volume: honeypots mixed with real services, rotating credentials alongside decoy credentials, overlapping rate limiters and CAPTCHAs and behavioral analysis and IP reputation checks. No single ward stops a determined attacker. The maze does.

Hmbown 543ec29 2.3 KB Updated Sep 17, 2026

File contents

Guards and Wards

Layer many small defenses into a maze that exhausts intruders before they reach anything valuable.

Overview

Guards and Wards is interpreted here as a hybrid spell with a prototype execution model.

Canonical source: Guards and Wards (spell)

Provider target: OpenClaw

When To Use

You are deploying, inheriting, or auditing a system and need a full security review.
Multiple attack surfaces — secrets, permissions, dependencies, network exposure — need to be assessed together.
A single Glyph of Warding is not enough; you need layered, system-wide defenses.

Workflow

Inventory all surfaces: permissions, secrets management, dependency versions, network exposure, authentication, and access controls.
Assess each surface for vulnerabilities, misconfigurations, and unnecessary exposure.
Prioritize fixes by severity and exploitability, starting with the most dangerous gaps.
Apply hardening measures and return a report of what was secured, what remains exposed, and what needs ongoing monitoring.

Deliverables

A security audit report covering all assessed surfaces.
Prioritized remediation steps, starting with the most critical exposures.
A residual risk summary of what could not be fully secured and recommended monitoring.

Guardrails

Layered defenses rot if unmaintained. Each ward needs an owner and a freshness date — stale wards create false confidence.
The maze must not trap legitimate users. If your own team cannot navigate the wards, the defense has become a denial of service against yourself.
Document the ward map. Undocumented defenses become undocumented attack surface when the original caster leaves.

Default Invocation

Use $guards-and-wards to perform a full security audit of this system and prioritize what needs hardening first.

---name: guards-and-wardsdescription: In D&D, Guards and Wards fills an area with layered minor defenses — fog, locked doors, illusory walls, confusion effects — that individually are trivial but collectively make navigation exhausting. The real-world version is defense in depth through volume: honeypots mixed with real services, rotating credentials alongside decoy credentials, overlapping rate limiters and CAPTCHAs and behavioral analysis and IP reputation checks. No single ward stops a determined attacker. The maze does.---# Guards and WardsLayer many small defenses into a maze that exhausts intruders before they reach anything valuable.## OverviewGuards and Wards is interpreted here as a hybrid spell with a prototype execution model.Canonical source: Guards and Wards (spell)Provider target: OpenClaw## When To Use- You are deploying, inheriting, or auditing a system and need a full security review.- Multiple attack surfaces — secrets, permissions, dependencies, network exposure — need to be assessed together.- A single Glyph of Warding is not enough; you need layered, system-wide defenses.## Workflow1. Inventory all surfaces: permissions, secrets management, dependency versions, network exposure, authentication, and access controls.2. Assess each surface for vulnerabilities, misconfigurations, and unnecessary exposure.3. Prioritize fixes by severity and exploitability, starting with the most dangerous gaps.4. Apply hardening measures and return a report of what was secured, what remains exposed, and what needs ongoing monitoring.## Deliverables- A security audit report covering all assessed surfaces.- Prioritized remediation steps, starting with the most critical exposures.- A residual risk summary of what could not be fully secured and recommended monitoring.## Guardrails- Layered defenses rot if unmaintained. Each ward needs an owner and a freshness date — stale wards create false confidence.- The maze must not trap legitimate users. If your own team cannot navigate the wards, the defense has become a denial of service against yourself.- Document the ward map. Undocumented defenses become undocumented attack surface when the original caster leaves.## Default InvocationUse $guards-and-wards to perform a full security audit of this system and prioritize what needs hardening first.

Frequently asked questions