Openclaw Gatewaystack Governance — Security skill for Claude Code

GatewayStack Governance for OpenClaw

[](https://www.npmjs.com/package/@gatewaystack/gatewaystack-governance) [](https://github.com/davidcrowe/openclaw-gatewaystack-governance/actions/workflows/ci.yml) [](LICENSE)

OpenClaw gives your AI agents real power — they can read files, write code, execute commands, search the web, and call external APIs.

**But there's nothing standing between an agent and a dangerous tool call.**

No identity checks. No rate limits. No audit trail. If a malicious skill or a prompt injection tells your agent to exfiltrate your SSH keys, it just... does it.

**This plugin fixes that.**

It hooks into OpenClaw at the process level and enforces five governance checks on **every** tool call before it executes. Your agent can't bypass it, skip it, or talk its way around it.

**New to OpenClaw?** [OpenClaw](https://github.com/openclaw/openclaw) is an open-source framework for building personal AI agents that use tools — file access, shell commands, web search, and more. Tools are powerful, which is exactly why they need governance.

**Install with one command.**

Zero config. Immediate security, governance, and peace of mind for every tool call.

openclaw plugins install @gatewaystack/gatewaystack-governance

**Contents** [The threat is real](#the-threat-is-real) · [Why skills aren't enough](#why-skills-arent-enough) · [How it protects you](#how-it-protects-you) · [See it block an attack](#see-it-block-an-attack) · [Get started](#get-started) · [Configure your policy](#configure-your-policy)

The threat is real

These aren't hypotheticals. Published