Trust Management

GoPlus AgentGuard includes a trust registry for managing skill permissions.

Commands

Attest (Register a Skill)

/agentguard trust attest --id my-bot --source github.com/org/bot --version v1.0.0 --hash abc --trust-level restricted --preset trading_bot --reviewed-by admin

Lookup

/agentguard trust lookup --source github.com/org/bot

Revoke

/agentguard trust revoke --source github.com/org/bot --reason "security concern"

List

/agentguard trust list --trust-level trusted

Trust Levels

Level	Description
trusted	Full access per its capability model
restricted	Limited access, some actions require confirmation
untrusted	Minimal access, most actions blocked or require confirmation

Capability Presets

Preset	Network	Filesystem	Exec	Secrets	Web3
none	No	No	No	No	No
read_only	No	Read ./**	No	No	No
trading_bot	Binance, Bybit, OKX, Coinbase, Dextools, CoinGecko	./config/**, ./logs/**	No	*_API_KEY, *_API_SECRET	Chains 1, 56, 137, 42161
defi	All	No	No	No	Chains 1, 56, 137, 42161, 10, 8453, 43114

Auto-Scan on Session Start

When installed as a Claude Code plugin, AgentGuard automatically scans new skills on session start:

• Discovers skills in ~/.claude/skills/
• Calculates artifact hash and checks the registry
• Runs quickScan on new or updated skills
• Auto-registers with trust level based on scan results:
  • Low risk → trusted
  • Medium risk → restricted
  • High/Critical risk → untrusted