Agent Security Stack — Security skill for Claude Code
The open-source agent-security stack — redstamp + truecopy + strongroom — composed into one layered defense.
How to install Agent Security Stack
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open askalf/agent-security-stack and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Agent Security Stack does
The open-source agent-security stack — redstamp + truecopy + strongroom — composed into one layered defense. Vet the tool, contain the call, give it a key it never holds. Related: plumbline, the out-of-band trajectory monitor. Part of Own Your Stack.
Alternatives in Security
- Defense In Depth — Implement multi-layered testing and security best practices 98.1k ★
- Azure Key Vault .net — Cryptographic key management 1.8k ★
- ThinkWatch — Self-hosted AI API and MCP gateway for organizations: SSO and RBAC, per-user identity for MCP tool calls, PII 817 ★
README
agent-security-stack
[](https://github.com/askalf/agent-security-stack/actions/workflows/ci.yml) [](https://github.com/askalf/agent-security-stack/actions/workflows/codeql.yml) [](https://github.com/askalf/agent-security-stack/actions/workflows/cflite.yml) [](https://scorecard.dev/viewer/?uri=github.com/askalf/agent-security-stack)
_**Own your agent security.**_ The open-source agent-security suite — **[redstamp](https://github.com/askalf/redstamp) · [truecopy](https://github.com/askalf/truecopy) · [strongroom](https://github.com/askalf/strongroom)** — three tools that compose into one layered defense for every agent tool call, exposed as one MCP server. Part of **[Own Your Stack](https://github.com/askalf)**.
OpenClaw became 2026's first big AI-security disaster three ways at once: one-click **RCE**, a **poisoned skills** marketplace, and ~135k **leaked credentials**. Three failure modes — three small, open-source, zero-dependency tools, composed into one layered defense:
| | own your… | closes | role | |--
Related Skills
Askalf
Own Your Stack: open-source agent security (redstamp · truecopy · plumbline) and AI infrastructure you own ins
Redstamp
own your agent security — a deterministic, offline firewall for AI agent tool calls. Blocks secret exfil, prom
KeyValet
Give your AI agents a valet key, not your master key. Local credential broker for AI agents (MCP) on macOS: To
Gws 2sv Reset
Get a locked-out user back through Google 2-Step Verification — backup codes first (routine), then a lost secu
Q Sec Stack
Run or continue a security-stack intelligence investigation on a company. Maintains a single written case file
Gaia Debt
Fix the tech-debt backlog, a single issue or a recommended related batch, highest severity then oldest first,
Related Agents
Old Man
Call before concluding that a paper does not contain something, or before writing a pattern whose match decide
Vet
Perceptual-quality analyst for orkid output artifacts — images, movies, meshes (OBJ), heightmaps. Use for open
Thales Reviver
Thales Explorer persona. Re-examines a specific ruled-out direction with current ledger context to determine w
