aporthq/claude-code
skills/claude-code/SKILL.md
Set up APort guardrails for Claude Code. Creates a passport and activates the PreToolUse hook that enforces policy on every tool call. Local evaluation by default, zero network calls.
$ install --global
skillsauthnpx skillsauth add aporthq/aport-agent-guardrails claude-codeInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 15, 2026, 5:33 PM26.8s1 file scanned
SKILL.md
- name:
- claude-code
- description:
- Set up APort guardrails for Claude Code. Creates a passport and activates the PreToolUse hook that enforces policy on every tool call. Local evaluation by default, zero network calls.
You are setting up APort Agent Guardrails for Claude Code. Follow these steps in order.
Step 1: Check prerequisites
Run these checks. If either fails, tell the user what to install and stop.
bash --version | head -1
Expected: GNU bash, version 4 or higher.
jq --version
Expected: jq-1.x. If missing, tell the user: brew install jq (macOS) or apt install jq (Linux).
Step 2: Check if already configured
${CLAUDE_PLUGIN_ROOT}/bin/aport-status.sh 2>/dev/null
If this prints passport info, guardrails are already active. Ask the user if they want to reconfigure. If they say no, stop here.
If it prints nothing or errors, continue to Step 3.
Step 3: Run the passport wizard
APORT_FRAMEWORK=claude-code ${CLAUDE_PLUGIN_ROOT}/bin/aport-create-passport.sh --framework=claude-code
This is an interactive wizard. It will prompt the user for:
- Passport mode (local or hosted)
- Agent capabilities (which tools to allow)
- Limits (rate limits, file restrictions)
Let the user interact with the wizard directly. Do not answer the prompts for them.
Expected outcome: A passport file is created at ~/.claude/aport/passport.json.
Step 4: Verify
${CLAUDE_PLUGIN_ROOT}/bin/aport-status.sh
Expected: Shows passport location, agent ID, and evaluation mode. If this succeeds, tell the user guardrails are active.
The PreToolUse hook is registered automatically by the plugin system. No settings.json editing is needed.
Troubleshooting
If the wizard fails or status shows no passport:
- Check
~/.claude/aport/directory exists - Check the user has write permissions to
~/.claude/ - Run with
DEBUG_APORT=1prefix for verbose output
References
- Source code (Apache 2.0)
- Claude Code guide
Related Skills
aporthq/status
development
VerifiedTrustedCommunity
Check APort guardrail status — passport validity, evaluation mode, and recent audit log entries. Works for all frameworks.
20SKILL.mdUpdated Apr 30, 2026
aporthq/openclaw
tools
VerifiedTrustedCommunity
Set up APort guardrails for OpenClaw. Local-first policy enforcement that checks tool calls against your passport before execution. Zero network calls by default. Open-source (Apache 2.0).
20SKILL.mdUpdated Apr 30, 2026
openclaw/taskflow
tools
VerifiedTrustedCommunity
Use when work should span one or more detached tasks but still behave like one job with a single owner context. TaskFlow is the durable flow substrate under authoring layers like Lobster, ACPX, plugins, or plain code. Keep conditional logic in the caller; use TaskFlow for flow identity, child-task linkage, waiting state, revision-checked mutations, and user-facing emergence.
357,764SKILL.mdUpdated Apr 10, 2026
openclaw/extensions/lobster
tools
VerifiedTrustedCommunity
# Lobster Lobster executes multi-step workflows with approval checkpoints. Use it when: - User wants a repeatable automation (triage, monitor, sync) - Actions need human approval before executing (send, post, delete) - Multiple tool calls should run as one deterministic operation ## When to use Lobster | User intent | Use Lobster? | | ------------------------------------------------------ | --------------------------
357,764SKILL.mdUpdated Apr 10, 2026