How do I install the Guava Suite skill?

Run npx skillmds@latest add modbender/guava-suite in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Guava Suite safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts, makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Guava Suite?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Guava Suite free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Guava Suite?

modbender (@modbender) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Guava Suite by modbender — Agent Skill

Name: Guava Suite
Rating: 4.5 (4 reviews)
Author: modbender

Guava Suite

Premium security suite for AI agents. Adds $GUAVA token-gated strict mode protection on top of guard-scanner. Features: 2-layer defense (static + runtime), Soul Lock, Memory Guard, on-chain identity verification via SoulRegistry V2. Requires $GUAVA token on Polygon Mainnet.

modbender Updated Sep 9, 2026 12 repo stars

File contents

GuavaSuite 🍈

Premium 2-layer security for AI agents — powered by $GUAVA token gating.

What It Does

GuavaSuite upgrades your guard-scanner from enforce (CRITICAL-only) to strict mode (HIGH + CRITICAL blocking), plus adds these exclusive features:

Feature	Free (guard-scanner)	Suite ($GUAVA)
Static Scan (129 patterns, 21 categories)	✅	✅
Runtime Guard (enforce)	✅	✅
Runtime Guard (strict)	❌	✅
Soul Lock (SOUL.md integrity + auto-rollback)	❌	✅
Memory Guard (L1-L5 記憶システム保護)	❌	✅
Zettel Memory (原子的ノート+リンク+検索)	❌	✅
On-chain Identity (SoulRegistry V2)	❌	✅
Audit Log (JSONL)	✅	✅

Prerequisites

guard-scanner installed (clawhub install guard-scanner)
$GUAVA tokens on Polygon Mainnet (minimum 1M $GUAVA)
- Token: 0x25cBD481901990bF0ed2ff9c5F3C0d4f743AC7B8
- Buy on QuickSwap V2

How to Get $GUAVA

Method	How
超越者プラン (note.com membership)	手動送金 — MetaMaskでウォレットに直接送付
自分で購入	QuickSwap V2 で MATIC → $GUAVA swap

セキュリティ方針: $GUAVAの配布はすべてMetaMaskからの手動送金で行います。秘密鍵をスクリプトに渡すことは一切しません。

Quick Start

1. Install

# Via clawhub (coming soon)
clawhub install guava-suite

# Or: git clone + setup
git clone https://github.com/koatora20/guava-suite.git
cd guava-suite && bash setup.sh

2. Activate

node services/license-api/src/activate.js --wallet 0xYOUR_WALLET_ADDRESS

This single command will:

Request a challenge nonce
Prompt you to sign with your wallet (EIP-712)
Verify your signature & check $GUAVA balance on Polygon
Save JWT locally & switch guard-scanner to strict mode

3. Check Status

node services/license-api/src/activate.js --status

Deactivate

node services/license-api/src/activate.js --deactivate

How Token Gating Works

   You hold $GUAVA on Polygon
           │
           ▼
   Sign EIP-712 challenge
           │
           ▼
   LicenseService checks:
   ├─ Signature valid?
   ├─ $GUAVA balance ≥ 1M?
   │
   ▼
   JWT issued → SuiteGate activated
           │
           ▼
   guard-scanner mode: strict
   (HIGH + CRITICAL blocked)

Architecture

SuiteGate — JWT-based fail-closed gate (grace period for network issues)
LicenseService — Nonce + EIP-712 signature + $GUAVA balance check + JWT issuance
TokenBalanceChecker — Polygon RPC ERC-20 balance verification (zero dependencies)
SuiteBridge — Connects SuiteGate status to guard-scanner runtime mode
SoulRegistry V2 — On-chain identity verification (Polygon)

External Endpoints

URL	Data Sent	Purpose
`polygon-rpc.com`	Wallet address	$GUAVA balance check (read-only `eth_call`)

Security & Privacy

Read-only on-chain: Only calls balanceOf — no transactions, no approvals
Local JWT: Tokens stored locally, never sent to external servers
Fail-closed: If balance check fails, Suite features are disabled (not bypassed)
No telemetry: Zero analytics or tracking

License

---name: guava-suitedescription: Premium security suite for AI agents. Adds $GUAVA token-gated strict mode protection on top of guard-scanner. Features: 2-layer defense (static + runtime), Soul Lock, Memory Guard, on-chain identity verification via SoulRegistry V2. Requires $GUAVA token on Polygon Mainnet.--- # GuavaSuite 🍈 Premium 2-layer security for AI agents — powered by **$GUAVA** token gating. ## What It Does GuavaSuite upgrades your guard-scanner from `enforce` (CRITICAL-only) to `strict` mode (HIGH + CRITICAL blocking), plus adds these exclusive features: | Feature | Free (guard-scanner) | Suite ($GUAVA) | |---------|---------------------|----------------| | Static Scan (129 patterns, 21 categories) | ✅ | ✅ | | Runtime Guard (enforce) | ✅ | ✅ | | **Runtime Guard (strict)** | ❌ | ✅ | | **Soul Lock** (SOUL.md integrity + auto-rollback) | ❌ | ✅ | | **Memory Guard** (L1-L5 記憶システム保護) | ❌ | ✅ | | **Zettel Memory** (原子的ノート+リンク+検索) | ❌ | ✅ | | **On-chain Identity** (SoulRegistry V2) | ❌ | ✅ | | Audit Log (JSONL) | ✅ | ✅ | ## Prerequisites 1. **guard-scanner** installed (`clawhub install guard-scanner`) 2. **$GUAVA tokens** on Polygon Mainnet (minimum 1M $GUAVA) - Token: `0x25cBD481901990bF0ed2ff9c5F3C0d4f743AC7B8` - Buy on [QuickSwap V2](https://quickswap.exchange/#/swap) ### How to Get $GUAVA | Method | How | |--------|-----| | **超越者プラン** (note.com membership) | 手動送金 — MetaMaskでウォレットに直接送付 | | **自分で購入** | QuickSwap V2 で MATIC → $GUAVA swap | > **セキュリティ方針**: $GUAVAの配布はすべてMetaMaskからの手動送金で行います。秘密鍵をスクリプトに渡すことは一切しません。 ## Quick Start ### 1. Install ```bash # Via clawhub (coming soon) clawhub install guava-suite # Or: git clone + setup git clone https://github.com/koatora20/guava-suite.git cd guava-suite && bash setup.sh ``` ### 2. Activate ```bash node services/license-api/src/activate.js --wallet 0xYOUR_WALLET_ADDRESS ``` This single command will: 1. Request a challenge nonce 2. Prompt you to sign with your wallet (EIP-712) 3. Verify your signature & check $GUAVA balance on Polygon 4. Save JWT locally & switch guard-scanner to `strict` mode ### 3. Check Status ```bash node services/license-api/src/activate.js --status ``` ### Deactivate ```bash node services/license-api/src/activate.js --deactivate ``` ## How Token Gating Works ``` You hold $GUAVA on Polygon │ ▼ Sign EIP-712 challenge │ ▼ LicenseService checks: ├─ Signature valid? ├─ $GUAVA balance ≥ 1M? │ ▼ JWT issued → SuiteGate activated │ ▼ guard-scanner mode: strict (HIGH + CRITICAL blocked) ``` ## Architecture - **SuiteGate** — JWT-based fail-closed gate (grace period for network issues) - **LicenseService** — Nonce + EIP-712 signature + $GUAVA balance check + JWT issuance - **TokenBalanceChecker** — Polygon RPC ERC-20 balance verification (zero dependencies) - **SuiteBridge** — Connects SuiteGate status to guard-scanner runtime mode - **SoulRegistry V2** — On-chain identity verification (Polygon) ## External Endpoints | URL | Data Sent | Purpose | |-----|-----------|---------| | `polygon-rpc.com` | Wallet address | $GUAVA balance check (read-only `eth_call`) | ## Security & Privacy - **Read-only on-chain**: Only calls `balanceOf` — no transactions, no approvals - **Local JWT**: Tokens stored locally, never sent to external servers - **Fail-closed**: If balance check fails, Suite features are disabled (not bypassed) - **No telemetry**: Zero analytics or tracking ## License Proprietary — © 2026 Guava 🍈 & Dee

Frequently asked questions