agent-access-control

What This Skill Does

The agent-access-control skill provides a robust security layer for OpenClaw AI agents operating on messaging platforms like WhatsApp, Telegram, Discord, and Signal. It acts as a digital gatekeeper, ensuring that your agent's capabilities—ranging from basic chitchat to sensitive data access—are strictly gated behind a multi-tier permission system. The skill features an automated 'stranger deflection' mechanism that politely informs unsolicited contacts that the agent is currently unavailable, while simultaneously pinging the owner for manual verification. By centralizing contact management through a simple JSON configuration, this skill prevents unauthorized tool usage and protects your privacy.

Installation

To add this layer of security to your agent, run the following command in your terminal:

clawhub install openclaw/skills/skills/bowen31337/agent-access-control

After installation, initialize the security protocol by creating memory/access-control.json within your workspace. Configure the ownerIds array, define your strangerMessage, and set the notifyChannel and notifyTarget parameters to ensure alerts reach your primary messaging app.

Use Cases

• Personal Assistants: Keep your private AI free from spam or unwanted interruptions while maintaining a polite persona.
• Team Management: Regulate access within group chats by upgrading colleagues to 'Trusted' status while keeping unknown external users at bay.
• Privacy-First Operations: Ensure that internal tools and memory files are strictly inaccessible to anyone other than the verified owner.
• Professional Gatekeeping: Act as an automated secretary that triages incoming messages, allowing you to manually approve who gets to interact with your agent.

Example Prompts

1. "Check my pending approvals and upgrade John Doe to a Trusted contact so he can use the weather tool."
2. "Add +1-555-0199 to the blocked list immediately; they keep spamming the agent."
3. "Change the agent's stranger deflection message to be more formal and mention that I am currently on vacation."

Tips & Limitations

• Normalization is Key: Always ensure phone numbers include the international country code prefix to avoid mapping errors during the ID check phase.
• Tier Strategy: Use the 'Chat-only' tier for acquaintances you want to talk to, but avoid giving them access to your file system or automation tools.
• Maintenance: Regularly audit your approvedContacts list to revoke access for users who no longer require it.
• Limitations: The skill currently relies on the messaging platform's API availability; ensure your network connection is stable for real-time owner notifications to function correctly.