How do I install the Guava Guard skill?

Run npx skillmds@latest add javimosch/guava-guard in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Guava Guard safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Guava Guard?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Guava Guard free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Guava Guard?

javimosch (@javimosch) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Guava Guard by javimosch — Agent Skill

Name: Guava Guard
Author: javimosch

Guava Guard

Runtime security guard + scanner for OpenClaw agents. Part of the guard-scanner ecosystem. Detects reverse shells, credential theft, and sandbox escapes in real-time. For full static scanning with 150+ patterns, install guard-scanner.

javimosch bd596a6 3.4 KB Updated Sep 17, 2026

File contents

GuavaGuard 🛡️ — Part of the guard-scanner Ecosystem

Runtime security scanner and monitor for your OpenClaw agent.

🔗 Looking for full static scanning? → clawhub install guard-scanner (150+ patterns, 23 categories, 4,000+ downloads)

GuavaGuard watches tool calls in real-time and warns when it detects dangerous patterns — reverse shells, credential exfiltration, sandbox escapes, and more.

Quick Start

# 1. Install the full security scanner suite
clawhub install guard-scanner    # Static scanner (150+ patterns)
clawhub install guava-guard      # Runtime monitor (12 patterns)

# 2. Pre-install safety gate
npx guard-scanner ./skills --self-exclude --verbose

# 3. Enable the runtime hook
openclaw hooks install skills/guava-guard/hooks/guava-guard
openclaw hooks enable guava-guard

# 4. Restart gateway, then verify:
openclaw hooks list   # Should show 🍈 guava-guard as ✓ ready

What It Detects (12 runtime patterns)

Pattern	Severity	Example
Reverse shell	🔴 CRITICAL	`/dev/tcp/`, `nc -e`, `socat TCP`
Credential exfiltration	🔴 CRITICAL	Secrets → webhook.site, ngrok, requestbin
Guardrail disabling	🔴 CRITICAL	`exec.approval = off` (CVE-2026-25253)
macOS Gatekeeper bypass	🔴 CRITICAL	`xattr -d quarantine`
ClawHavoc AMOS	🔴 CRITICAL	`socifiapp`, Atomic Stealer indicators
Base64 → shell	🔴 CRITICAL	`base64 -d \| bash`
Download → shell	🔴 CRITICAL	`curl \| bash`, `wget \| sh`
Cloud metadata SSRF	🔴 CRITICAL	`169.254.169.254`
Known malicious IP	🔴 CRITICAL	`91.92.242.30`
DNS exfiltration	🟠 HIGH	`nslookup $secret`, `dig @attacker`
SSH key access	🟠 HIGH	`.ssh/id_*`, `.ssh/authorized_keys`
Crypto wallet access	🟠 HIGH	`wallet seed`, `mnemonic`, `seed phrase`

The guard-scanner Ecosystem

GuavaGuard is the runtime half of a two-layer defense:

Layer	Tool	Patterns	When
Static	`guard-scanner`	150+ patterns / 23 categories	Before install
Runtime	`guava-guard`	12 patterns	During execution

Install both for maximum protection:

clawhub install guard-scanner
clawhub install guava-guard

guard-scanner — ClawHub search score #1 (3.591), 4,000+ downloads

150 static patterns + 26 runtime checks
HTML dashboard, SARIF, JSON output
CVE-2026-2256, CVE-2026-25046, CVE-2026-25905, CVE-2026-27825 covered
Zero dependencies, MIT licensed

GitHub: https://github.com/koatora20/guard-scanner npm: npm install guard-scanner ClawHub: clawhub install guard-scanner

Current Limitation

Warning: OpenClaw's hook API does not yet support blocking tool execution. GuavaGuard currently warns only — it cannot prevent dangerous calls. When a cancel API is added, blocking will be enabled automatically. See: Issue #18677

Audit Log

All detections are logged to ~/.openclaw/guava-guard/audit.jsonl (JSON lines format).

License

MIT. Zero dependencies. 🍈

By Guava Parity Institute (GPI) — ASI×Human Perfect Parity

---name: guava-guarddescription: Runtime security guard + scanner for OpenClaw agents. Part of the guard-scanner ecosystem. Detects reverse shells, credential theft, and sandbox escapes in real-time. For full static scanning with 150+ patterns, install guard-scanner.---# GuavaGuard 🛡️ — Part of the guard-scanner Ecosystem**Runtime security scanner and monitor for your OpenClaw agent.**> 🔗 **Looking for full static scanning?** → `clawhub install guard-scanner` (150+ patterns, 23 categories, 4,000+ downloads)GuavaGuard watches tool calls in real-time and warns when it detects dangerous patterns — reverse shells, credential exfiltration, sandbox escapes, and more.## Quick Start```bash# 1. Install the full security scanner suiteclawhub install guard-scanner # Static scanner (150+ patterns)clawhub install guava-guard # Runtime monitor (12 patterns)# 2. Pre-install safety gatenpx guard-scanner ./skills --self-exclude --verbose# 3. Enable the runtime hookopenclaw hooks install skills/guava-guard/hooks/guava-guardopenclaw hooks enable guava-guard# 4. Restart gateway, then verify:openclaw hooks list # Should show 🍈 guava-guard as ✓ ready```## What It Detects (12 runtime patterns)| Pattern | Severity | Example ||---------|----------|---------|| Reverse shell | 🔴 CRITICAL | `/dev/tcp/`, `nc -e`, `socat TCP` || Credential exfiltration | 🔴 CRITICAL | Secrets → webhook.site, ngrok, requestbin || Guardrail disabling | 🔴 CRITICAL | `exec.approval = off` (CVE-2026-25253) || macOS Gatekeeper bypass | 🔴 CRITICAL | `xattr -d quarantine` || ClawHavoc AMOS | 🔴 CRITICAL | `socifiapp`, Atomic Stealer indicators || Base64 → shell | 🔴 CRITICAL | `base64 -d \| bash` || Download → shell | 🔴 CRITICAL | `curl \| bash`, `wget \| sh` || Cloud metadata SSRF | 🔴 CRITICAL | `169.254.169.254` || Known malicious IP | 🔴 CRITICAL | `91.92.242.30` || DNS exfiltration | 🟠 HIGH | `nslookup $secret`, `dig @attacker` || SSH key access | 🟠 HIGH | `.ssh/id_*`, `.ssh/authorized_keys` || Crypto wallet access | 🟠 HIGH | `wallet seed`, `mnemonic`, `seed phrase` |## The guard-scanner EcosystemGuavaGuard is the **runtime** half of a two-layer defense:| Layer | Tool | Patterns | When ||-------|------|----------|------|| **Static** | `guard-scanner` | 150+ patterns / 23 categories | Before install || **Runtime** | `guava-guard` | 12 patterns | During execution |Install both for maximum protection:```bashclawhub install guard-scannerclawhub install guava-guard```**guard-scanner** — ClawHub search score #1 (3.591), 4,000+ downloads- 150 static patterns + 26 runtime checks- HTML dashboard, SARIF, JSON output- CVE-2026-2256, CVE-2026-25046, CVE-2026-25905, CVE-2026-27825 covered- Zero dependencies, MIT licensed**GitHub**: https://github.com/koatora20/guard-scanner**npm**: `npm install guard-scanner`**ClawHub**: `clawhub install guard-scanner`## Current Limitation> **Warning**: OpenClaw's hook API does not yet support blocking tool execution.> GuavaGuard currently **warns only** — it cannot prevent dangerous calls.> When a cancel API is added, blocking will be enabled automatically.> See: [Issue #18677](https://github.com/openclaw/openclaw/issues/18677)## Audit LogAll detections are logged to `~/.openclaw/guava-guard/audit.jsonl` (JSON lines format).## LicenseMIT. Zero dependencies. 🍈*By Guava Parity Institute (GPI) — ASI×Human Perfect Parity*

Frequently asked questions