OpenClaw · Skill
Gatewaystack Governance
Deny-by-default governance layer for OpenClaw that intercepts every tool call before execution. Runs five mandatory checks: identity verification, scope enforcement, rate limiting, prompt injection detection, and audit logging. Three optional features add output DLP, human escalation, and behavioral monitoring.
Install
Start with the primary install command. Alternate entrypoints are included below for ClawHub and OpenClaw CLI users.
Primary command
clawhub install davidcrowe/gatewaystack-governanceClawHub installer
npx clawhub@latest install davidcrowe/gatewaystack-governanceOpenClaw CLI
openclaw skills install davidcrowe/gatewaystack-governanceDirect OpenClaw install
openclaw install davidcrowe/gatewaystack-governanceWhat this skill does
Deny-by-default governance layer for OpenClaw that intercepts every tool call before execution. Runs five mandatory checks: identity verification, scope enforcement, rate limiting, prompt injection detection, and audit logging. Three optional features add output DLP, human escalation, and behavioral monitoring.
Why it matters
Because it hooks at the process level, the agent cannot route around it the way it could with in-prompt or middleware-based guardrails.
Typical use cases
- Blocking an agent from calling tools outside its approved scope
- Detecting prompt injection attempts before a tool executes
- Reviewing audit logs after an unexpected agent action
- Redacting PII from tool output before it reaches the agent
- Triggering human review when an agent tries a tool for the first time
Source instructions
Quick overview
Deny-by-default governance layer for OpenClaw that intercepts every tool call before execution. Runs five mandatory checks: identity verification, scope enforcement, rate limiting, prompt injection detection, and audit logging. Three optional features add output DLP, human escalation, and behavioral monitoring.
Because it hooks at the process level, the agent cannot route around it the way it could with in-prompt or middleware-based guardrails.
Common tasks
- Blocking an agent from calling tools outside its approved scope
- Detecting prompt injection attempts before a tool executes
- Reviewing audit logs after an unexpected agent action
- Redacting PII from tool output before it reaches the agent
- Triggering human review when an agent tries a tool for the first time
Install paths
Primary command
openclaw install davidcrowe/gatewaystack-governance
ClawHub installer
npx clawhub@latest install davidcrowe/gatewaystack-governance
OpenClaw CLI
openclaw skills install davidcrowe/gatewaystack-governance
Direct OpenClaw install
openclaw install davidcrowe/gatewaystack-governance
Skill metadata
- Category: Coding Agents & IDEs
- Language: Markdown
- Version: 0.2.0
- Security status: Benign
Review upstream source
The full public SKILL.md body is not directly fetchable for this entry right now, so this page is using the best available catalog metadata. Review the upstream source page for the latest files, version history, and security scan details: https://clawhub.ai/davidcrowe/gatewaystack-governance