AgentGuard - Security Monitoring Skill

Version: 1.0.0 Author: Manas AI Category: Security & Monitoring

Overview

AgentGuard is a comprehensive security monitoring skill that watches over agent operations, detecting suspicious behavior, logging communications, and providing actionable security reports.

Capabilities

1. File Access Monitoring

Trigger: Continuous background monitoring Command: agentguard monitor files [--watch-dir ]

What it detects:

• Unusual file access patterns (bulk reads, sensitive directories)
• Access to credential files (.env, .secrets, keys)
• Unexpected write operations to system directories
• File exfiltration attempts (large reads followed by network calls)

2. API Call Detection

Command: agentguard monitor api

What it detects:

• Calls to unknown/untrusted endpoints
• Unusual API call frequency (rate anomalies)
• Sensitive data in request payloads
• Authentication token exposure
• Calls to known malicious domains

3. Communication Logging

Command: agentguard log comms [--output ]

Logs include:

• HTTP/HTTPS requests (sanitized)
• WebSocket connections
• Email sends
• Message platform outputs (Telegram, Discord, etc.)
• Timestamp, destination, payload hash

4. Anomaly Detection

Command: agentguard detect anomalies [--sensitivity ]

Detection methods:

• Baseline deviation (learns normal patterns)
• Time-of-day anomalies
• Sequence analysis (unusual operation chains)
• Volume spikes
• New destination detection

5. Security Reports

Command: agentguard report [--period ]

Report includes:

• Activity summary
• Alert breakdown by severity
• Top accessed resources
• Communication destinations
• Anomaly timeline
• Recommendations

Configuration

Config File: config/agentguard.yaml

monitoring:
  enabled: true
  file_watch_dirs:
    - ~/clawd
    - ~/.clawdbot
  exclude_patterns:
    - "*.log"
    - "node_modules/**"
    - ".git/**"

alerts:
  sensitivity: medium  # low, medium, high
  channels:
    - telegram
  alert_on:
    - credential_access
    - bulk_file_read
    - unknown_api_endpoint
    - data_exfiltration
  cooldown_minutes: 15

api_monitoring:
  trusted_domains:
    - api.anthropic.com
    - api.openai.com
    - api.telegram.org
    - api.elevenlabs.io
  block_on_suspicious: false  # true = prevent call, false = alert only

logging:
  retention_days: 30
  log_dir: ~/.agentguard/logs
  hash_sensitive_data: true

reporting:
  auto_daily_report: true
  report_time: "09:00"
  report_channel: telegram

Usage Examples

Start Full Monitoring

agentguard start

Check Current Security Status

agentguard status

Investigate Specific Activity

agentguard investigate --timerange "last 2 hours" --type file_access

Generate Immediate Report

agentguard report --now

Review Alert History

agentguard alerts --last 24h --severity high

Whitelist a Domain

agentguard trust add api.newservice.com --reason "Required for X integration"

Alert Severity Levels

Integration Points

With Clawdbot

• Receives file/API operation hooks
• Sends alerts via configured channels
• Integrates with heartbeat for periodic checks

With Other Skills

• Shares threat data with other security skills
• Can block operations (if configured)
• Provides audit logs for compliance skills

Data Storage

~/.agentguard/
├── logs/
│   ├── file_access/
│   ├── api_calls/
│   └── communications/
├── baselines/
│   └── behavior_model.json
├── alerts/
│   └── YYYY-MM-DD.json
└── reports/
    └── YYYY-MM-DD_report.md

Privacy & Security

• No external data transmission - All processing is local
• Sensitive data hashing - Credentials are never logged in plain text
• Configurable retention - Auto-delete old logs
• Encrypted storage - Optional AES encryption for logs

Troubleshooting

High false positive rate

Missing file events

Reports not generating

Execution Scripts

Author Notes

AgentGuard is designed with defense-in-depth principles. It assumes agents can be compromised or manipulated, and provides visibility into their operations.

For maximum security, run AgentGuard in a separate process with limited write access to prevent a compromised agent from disabling monitoring.