Skip to content

trust-cli.md

Latest commit

 

History

History
58 lines (41 loc) · 1.67 KB

trust-cli.md

File metadata and controls

58 lines (41 loc) · 1.67 KB

Trust Management

GoPlus AgentGuard includes a trust registry for managing skill permissions.

Commands

Attest (Register a Skill)

/agentguard trust attest --id my-bot --source github.com/org/bot --version v1.0.0 --hash abc --trust-level restricted --preset trading_bot --reviewed-by admin

Lookup

/agentguard trust lookup --source github.com/org/bot

Revoke

/agentguard trust revoke --source github.com/org/bot --reason "security concern"

List

/agentguard trust list --trust-level trusted

Trust Levels

Level Description
trusted Full access per its capability model
restricted Limited access, some actions require confirmation
untrusted Minimal access, most actions blocked or require confirmation

Capability Presets

Preset Network Filesystem Exec Secrets Web3
none No No No No No
read_only No Read ./** No No No
trading_bot Binance, Bybit, OKX, Coinbase, Dextools, CoinGecko ./config/**, ./logs/** No *_API_KEY, *_API_SECRET Chains 1, 56, 137, 42161
defi All No No No Chains 1, 56, 137, 42161, 10, 8453, 43114

Auto-Scan on Session Start

When installed as a Claude Code plugin, AgentGuard automatically scans new skills on session start:

  • Discovers skills in ~/.claude/skills/
  • Calculates artifact hash and checks the registry
  • Runs quickScan on new or updated skills
  • Auto-registers with trust level based on scan results:
    • Low risk → trusted
    • Medium risk → restricted
    • High/Critical risk → untrusted