A premium 2-layer security suite for AI agents featuring $GUAVA token-gated strict protection and on-chain identity verification.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install guava-suite
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install guava-suite using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is GuavaSuite?
GuavaSuite is a comprehensive security upgrade designed specifically for AI agents, extending the capabilities of the standard guard-scanner. It introduces a token-gated strict mode that blocks both high and critical severity threats, providing a robust defense layer for sensitive automated workflows. By leveraging the Polygon blockchain and EIP-712 signatures, it ensures that only verified users with a $GUAVA token balance can access advanced safety features like Soul Lock and Memory Guard. This integration represents a significant advancement in the ecosystem of Openclaw Skills, prioritizing integrity and runtime safety.
The suite operates on a fail-closed principle, meaning that if security checks fail or token requirements are not met, the system defaults to a protected state. This ensures that premium protection remains active and verifiable through local JWT issuance and decentralized identity protocols via SoulRegistry V2.
GuavaSuite Use Cases
- Protecting AI agents from high-risk malicious prompt injections and unauthorized runtime executions.
- Implementing on-chain identity verification for agent operators using the SoulRegistry V2 protocol.
- Ensuring file integrity and preventing unauthorized state changes through the Soul Lock and auto-rollback system.
- Safeguarding complex memory architectures with the L1-L5 Memory Guard protection system.
- Upgrading standard guard-scanner implementations to strict enforcement for enterprise-grade security.
How GuavaSuite Works
- The user ensures they hold a minimum of 1M $GUAVA tokens on the Polygon Mainnet.
- The LicenseService issues a challenge nonce which the user signs using an EIP-712 compliant wallet like MetaMask.
- The system verifies the cryptographic signature and performs a read-only balance check via the Polygon RPC (eth_call).
- Upon successful verification, a local JWT is issued and the SuiteGate activates without requiring the user to share private keys.
- The SuiteBridge automatically switches the guard-scanner to strict mode, enabling the blocking of both High and Critical threats alongside Soul Lock and Memory Guard features.
GuavaSuite Setup
First, ensure you have guard-scanner installed via the Openclaw Skills hub. Then, install the suite and run the setup script:
git clone https://github.com/koatora20/guava-suite.git
cd guava-suite && bash setup.sh
To activate your license and enable strict mode, run the activation command with your Polygon wallet address:
node services/license-api/src/activate.js --wallet 0xYOUR_WALLET_ADDRESS
You can check your license status or deactivate the suite using these commands:
# Check Status
node services/license-api/src/activate.js --status
# Deactivate
node services/license-api/src/activate.js --deactivate
GuavaSuite Data Schema & Taxonomy
GuavaSuite maintains local security logs and state management through the following structures:
| Component | Data Type | Description |
|---|---|---|
| Audit Log | JSONL | Local records of all scanned patterns and security events. |
| JWT License | String | Locally stored token representing the active subscription status. |
| SoulRegistry V2 | On-chain | Decentralized identity metadata stored on the Polygon blockchain. |
| SOUL.md | Markdown | Integrity manifest used by Soul Lock for environment consistency checks. |
GuavaSuite Advanced Features
- Strict Mode Enforcement: Automatically blocks both High and Critical severity patterns discovered by the scanner, providing a higher safety floor than standard tools.
- Soul Lock: Actively monitors SOUL.md for integrity and triggers automatic rollbacks if unauthorized environment changes are detected.
- Memory Guard: Specialized protection for tiered memory systems (L1-L5), preventing unauthorized data injection into the agent's long-term or short-term context.
- Zettel Memory Integration: Provides atomic note-taking, linking, and search capabilities integrated directly into the security workflow for auditability.
- Privacy-First Token Gating: Uses read-only
balanceOfcalls with zero dependencies on external tracking or telemetry servers.
SKILL.md
Loading
Related Openclaw Skills
GuavaMemory
A structured episodic memory system that uses Q-value scoring to help AI agents remember successful patterns and avoid past mistakes.
GuavaGuard
A real-time runtime security monitor that identifies and warns against malicious patterns during agent execution.
whoopskill
A comprehensive CLI tool for fetching and analyzing WHOOP health metrics including sleep, recovery, HRV, and strain.
Canvas OS
An application platform that turns the OpenClaw Canvas into a dynamic environment for running and controlling rich HTML/CSS/JS applications.
Memory Mastery
A sophisticated three-layer memory architecture that provides AI agents with persistent context and semantic search capabilities across sessions.
mv-pipeline
An end-to-end automated pipeline for creating professional AI-generated music videos from lyrics generation to YouTube upload.
Featured*
