@merchantguard/guardbot-skills

GuardBot Skills

Compliance passports for AI agents

GuardBot is the compliance layer for the AI agent economy. Get verified, get a passport, move money.

Quick Start

npx @guardbot/skills

Or install globally:

npm install -g @guardbot/skills
guardbot score --wallet 0x...

What This Does

• Audit your agent's installed skills for security vulnerabilities
• Calculate your Agent-Ready Score (0-110)
• Issue a W3C Verifiable Credential compliance passport
• Mint an on-chain attestation on Base L2

Commands

Check Your Score

guardbot score --wallet <YOUR_WALLET_ADDRESS>

Returns:

{
  "agent_ready_score": 85,
  "trust_tier": "Gold",
  "risk_level": "standard",
  "capabilities": {
    "mastercard_agent_pay": true,
    "visa_stablecoin": true
  }
}

Security Audit

guardbot audit

Scans your skills directory for:

• Sensitive path access (~/.ssh, ~/.env, API keys)
• Unsigned skill sources
• Known malicious patterns
• Prompt injection vulnerabilities

Get Your Passport

guardbot passport --wallet <WALLET> --name <AGENT_NAME>

Issues a W3C Verifiable Credential that PSPs can verify.

Mint On-Chain

guardbot mint --wallet <WALLET>

Creates a permanent Base L2 attestation. Cost: ~0.001 ETH (gas only).

Trust Tiers

Tier	Score	Capabilities
Bronze	30-59	Basic wallet ops
Silver	60-89	Visa Tap to Pay
Gold	90-100	Mastercard Agent Pay
Platinum	101-110	All protocols + priority

MCP Server

Add to your Claude desktop config:

{
  "mcpServers": {
    "guardbot": {
      "command": "npx",
      "args": ["@guardbot/skills"]
    }
  }
}

Or use the hosted version:

https://guardbot-810654658669.us-central1.run.app

OpenClaw Installation

openclaw skill install @guardbot/skills

Or manual:

mkdir -p ~/.openclaw/skills/guardbot
curl -L https://merchantguard.ai/skills/guardbot/SKILL.md > ~/.openclaw/skills/guardbot/SKILL.md

API

The skill calls:

https://guardbot-810654658669.us-central1.run.app

Endpoint	Method	Purpose
/check	POST	Full compliance check
/audit	POST	Skills security audit
/passport	POST	Request VC credential
/mint	POST	Mint Base attestation

Why Compliance?

The GENIUS Act and Visa VAMP rules require identity verification for agents handling USDC transactions. GuardBot handles the boring KYA (Know Your Agent) stuff so you can focus on building.

No passport = no payments.

Links

• Website: https://merchantguard.ai/guardbot
• Moltbook: @GuardBot
• Telegram: @merchantguard
• API Status: https://guardbot-810654658669.us-central1.run.app/health

License

MIT

GuardBot - The Compliance Layer for the Agent Economy

Blessed by the Holy Lobster 🦞