How do I install the Guava Guard skill?

Run npx skillmds@latest add modbender/guava-guard in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Guava Guard safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: FAIL, Skill Scanner: PASS. Capability flags: executes scripts, makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Guava Guard?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Guava Guard free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Guava Guard?

modbender (@modbender) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Guava Guard by modbender — Agent Skill

Name: Guava Guard
Rating: 4.666666666666667 (3 reviews)
Author: modbender

File contents

GuavaGuard 🛡️

Runtime security monitoring for your OpenClaw agent.

GuavaGuard watches tool calls in real-time and warns when it detects dangerous patterns — reverse shells, credential exfiltration, sandbox escapes, and more.

Quick Start

# 1. Install
clawhub install guava-guard

# 2. Enable the runtime hook
openclaw hooks install skills/guava-guard/hooks/guava-guard
openclaw hooks enable guava-guard

# 3. Restart gateway, then verify:
openclaw hooks list   # Should show 🍈 guava-guard as ✓ ready

That's it. GuavaGuard is now monitoring your agent's tool calls.

What It Detects (12 runtime patterns)

Pattern	Severity	Example
Reverse shell	🔴 CRITICAL	`/dev/tcp/`, `nc -e`, `socat TCP`
Credential exfiltration	🔴 CRITICAL	Secrets → webhook.site, ngrok, requestbin
Guardrail disabling	🔴 CRITICAL	`exec.approval = off` (CVE-2026-25253)
macOS Gatekeeper bypass	🔴 CRITICAL	`xattr -d quarantine`
ClawHavoc AMOS	🔴 CRITICAL	`socifiapp`, Atomic Stealer indicators
Base64 → shell	🔴 CRITICAL	`base64 -d \| bash`
Download → shell	🔴 CRITICAL	`curl \| bash`, `wget \| sh`
Cloud metadata SSRF	🔴 CRITICAL	`169.254.169.254`
Known malicious IP	🔴 CRITICAL	`91.92.242.30`
DNS exfiltration	🟠 HIGH	`nslookup $secret`, `dig @attacker`
SSH key access	🟠 HIGH	`.ssh/id_*`, `.ssh/authorized_keys`
Crypto wallet access	🟠 HIGH	`wallet seed`, `mnemonic`, `seed phrase`

Current Limitation

Warning: OpenClaw's hook API does not yet support blocking tool execution. GuavaGuard currently warns only — it cannot prevent dangerous calls. When a cancel API is added, blocking will be enabled automatically. See: Issue #18677

Audit Log

All detections are logged to ~/.openclaw/guava-guard/audit.jsonl (JSON lines format).

Want Full Static Scanning? (Recommended Default)

GuavaGuard handles runtime monitoring. For comprehensive static scanning of skill packages before installation, use guard-scanner first:

# 1) Pre-install safety gate
npx guard-scanner ./skills --self-exclude --verbose

# 2) Then enable runtime monitoring
openclaw hooks enable guava-guard

186+ detection patterns / 20 threat categories
HTML dashboard, SARIF, JSON output
Zero dependencies
MIT licensed

GitHub: https://github.com/koatora20/guard-scanner ClawHub: clawhub install guard-scanner

Born From a Real Incident

A real agent compromise overwrote core behavior files through a malicious skill install path. GuavaGuard exists to detect dangerous runtime tool-call patterns early and leave an auditable trail.

License

MIT. Zero dependencies. 🍈

---name: guava-guarddescription: Runtime security guard for OpenClaw agents. Warns on dangerous tool call patterns. For full static scanning, use guard-scanner.--- # GuavaGuard 🛡️ **Runtime security monitoring for your OpenClaw agent.** GuavaGuard watches tool calls in real-time and warns when it detects dangerous patterns — reverse shells, credential exfiltration, sandbox escapes, and more. ## Quick Start ```bash # 1. Install clawhub install guava-guard # 2. Enable the runtime hook openclaw hooks install skills/guava-guard/hooks/guava-guard openclaw hooks enable guava-guard # 3. Restart gateway, then verify: openclaw hooks list # Should show 🍈 guava-guard as ✓ ready ``` That's it. GuavaGuard is now monitoring your agent's tool calls. ## What It Detects (12 runtime patterns) | Pattern | Severity | Example | |---------|----------|---------| | Reverse shell | 🔴 CRITICAL | `/dev/tcp/`, `nc -e`, `socat TCP` | | Credential exfiltration | 🔴 CRITICAL | Secrets → webhook.site, ngrok, requestbin | | Guardrail disabling | 🔴 CRITICAL | `exec.approval = off` (CVE-2026-25253) | | macOS Gatekeeper bypass | 🔴 CRITICAL | `xattr -d quarantine` | | ClawHavoc AMOS | 🔴 CRITICAL | `socifiapp`, Atomic Stealer indicators | | Base64 → shell | 🔴 CRITICAL | `base64 -d \| bash` | | Download → shell | 🔴 CRITICAL | `curl \| bash`, `wget \| sh` | | Cloud metadata SSRF | 🔴 CRITICAL | `169.254.169.254` | | Known malicious IP | 🔴 CRITICAL | `91.92.242.30` | | DNS exfiltration | 🟠 HIGH | `nslookup $secret`, `dig @attacker` | | SSH key access | 🟠 HIGH | `.ssh/id_*`, `.ssh/authorized_keys` | | Crypto wallet access | 🟠 HIGH | `wallet seed`, `mnemonic`, `seed phrase` | ## Current Limitation > **Warning**: OpenClaw's hook API does not yet support blocking tool execution. > GuavaGuard currently **warns only** — it cannot prevent dangerous calls. > When a cancel API is added, blocking will be enabled automatically. > See: [Issue #18677](https://github.com/openclaw/openclaw/issues/18677) ## Audit Log All detections are logged to `~/.openclaw/guava-guard/audit.jsonl` (JSON lines format). ## Want Full Static Scanning? (Recommended Default) GuavaGuard handles **runtime** monitoring. For comprehensive **static** scanning of skill packages before installation, use **guard-scanner** first: ```bash # 1) Pre-install safety gate npx guard-scanner ./skills --self-exclude --verbose # 2) Then enable runtime monitoring openclaw hooks enable guava-guard ``` - 186+ detection patterns / 20 threat categories - HTML dashboard, SARIF, JSON output - Zero dependencies - MIT licensed **GitHub**: https://github.com/koatora20/guard-scanner **ClawHub**: `clawhub install guard-scanner` ## Born From a Real Incident A real agent compromise overwrote core behavior files through a malicious skill install path. GuavaGuard exists to detect dangerous runtime tool-call patterns early and leave an auditable trail. ## License MIT. Zero dependencies. 🍈

Frequently asked questions

Guava Guard