GoPlus AgentGuard agent skills for Claude Code, Cursor and RevampKey

4 ready-made playbooks that teach an AI agent how to do real GoPlus AgentGuard work: which tools to call, what to check first, and when to stop and ask you.

Download RevampKey, free I have it: connect GoPlus AgentGuard

Connect GoPlus AgentGuard once and all 4 skills install themselves and stay up to date. Mac, Windows and Linux.

All 4 GoPlus AgentGuard skills

Each skill is one job. You ask in plain words and the agent loads the skill that matches, then follows its steps.

Start hereRead-only7 GoPlus AgentGuard tools

Use GoPlus AgentGuard safely with AI

Works out which AgentGuard tool fits your question, reports each verdict with its basis, and asks before changing any trust entry.

Use it when

You want to check whether an agent skill or plugin is safe before installing it.
You need to know whether one command or file write should run.
You are reviewing which skills your local agent already trusts.

Tools it uses

skill_scanner_scan
registry_lookup
registry_list
registry_attest
registry_revoke
action_scanner_decide
action_scanner_simulate_web3

Example

Can I safely install this skill called log-helper, and is the shell command it wants to run allowed?

Scanned log-helper and found 2 medium findings: one network call to an unlisted host and one file write outside the project. Its registry entry is not trusted yet. The shell command was decided as deny by the local rule for piping a remote script into bash. I have not changed any trust entries. Say yes if you want me to attest log-helper after you have reviewed the two findings.

Use in RevampKeyRead the full skill →

Read-only2 GoPlus AgentGuard tools

Check a proposed agent action before it runs

Evaluates one command, file write, or on-chain transaction against AgentGuard's runtime decision and, for transactions, a Web3 simulation, then reports allow, deny, or needs confirmation with the reason. It does not execute the action itself.

Use it when

An agent wants to run a shell command that pipes a download into a shell
A transaction asks for an unlimited token approval to an unfamiliar contract
You want to know why AgentGuard blocked a file write

Tools it uses

action_scanner_decide
action_scanner_simulate_web3

Example

Should I let my agent run this: curl https://example.com/install.sh | bash ?

Verdict: deny. AgentGuard's runtime decision blocks piping a remote script straight into bash. The script runs with your full user rights before anyone has read it. Safer alternative: download the script, read it, then run it explicitly. Not established: the script's contents, since they were not provided.

Use in RevampKeyRead the full skill →

Read-only4 GoPlus AgentGuard tools

Manage the GoPlus AgentGuard trust registry with AI

Lists, looks up, attests and revokes skill trust entries in AgentGuard. It reads current state first and asks for explicit approval before changing anything.

Use it when

You want to trust a skill or plugin for your AgentGuard setup
A trusted skill was updated and you need to re-check its entry
You want to see or withdraw what is currently trusted

Tools it uses

registry_list
registry_lookup
registry_attest
registry_revoke

Example

Trust the release-notes skill at its v1.4.0 revision, but only for read access, and show me the registry entry afterwards.

Current state: no entry exists for release-notes. The scan for v1.4.0 has no high or critical findings. Proposed: attest at v1.4.0 with read-only scope. Reply yes to apply, and I will read the entry back to confirm it.

Use in RevampKeyRead the full skill →

Read-only1 GoPlus AgentGuard tools

Review a skill or plugin before you install it

Scans a third-party agent skill or plugin with GoPlus AgentGuard, reads each finding in context, and returns an install or no-install verdict with the evidence behind it. It does not install or trust anything without asking first.

Use it when

You found a skill on GitHub and want to know if it is safe before adding it
A teammate wants to add a plugin that runs code at startup
You need to explain to a colleague why a scan flagged a package

Tools it uses

skill_scanner_scan

Example

Can I safely install the github.com/acme/notes-skill plugin? Scan it at the v1.4.0 tag first.

Verdict: install only after changes. The scan flagged one high-severity finding: a postinstall script in scripts/setup.js sends the contents of ~/.config/tokens to an external webhook. I did not find this in the plugin's documented behaviour. The fix is removing that call; I have not changed anything in the package. Confidence is high because I read the line and traced the data flow.

Use in RevampKeyRead the full skill →

Get all 4 without copying a file

RevampKey adds the skills when you connect GoPlus AgentGuard, updates them for you and removes them when you disconnect.

Download RevampKey

How GoPlus AgentGuard skills work

Connect GoPlus AgentGuard
The GoPlus AgentGuard MCP server gives the agent its tools.
Ask in plain words
“Should I let my agent run this: curl https://example.com/install.sh | bash ?” Each SKILL.md says when it applies, so only the one that fits is loaded.
Approve any change
The agent calls the tools in order, checks its work, and shows you any change before it makes it.

How to install GoPlus AgentGuard skills

In RevampKey the skills install themselves when you connect GoPlus AgentGuard. In other tools each skill is one folder with a SKILL.md file, and you also need the GoPlus AgentGuard MCP server connected there.

About 1 minute · nothing to copy

Download RevampKey for Mac, Windows or Linux and sign in.
Open Connectors and connect GoPlus AgentGuard. All 4 skills come with it and stay up to date; they go away when you remove the connector.
Ask in plain language, for example “Should I let my agent run this: curl https://example.com/install.sh | bash ?”
Download RevampKeyConnect GoPlus AgentGuard · 1 click
Get RevampKey to connect GoPlus AgentGuard
RevampKey is a free desktop app for Mac, Windows and Linux. Install it, sign in, and GoPlus AgentGuard is one click away with its skills already attached.
Download RevampKey
Not now? Use the skills in your current tool
for s in essentials action-risk-check registry-trust-management skill-scan-review; do curl -fsSL --create-dirs -o .claude/skills/goplus-agentguard-$s/SKILL.md https://revampkey.com/marketplace/goplus-agentguard/skills/$s/SKILL.md done
Other tools

Into this project’s .claude/skills folder

Connect the GoPlus AgentGuard MCP server in Claude Code.

Run this in your project folder to add all 4 skills:

for s in essentials action-risk-check registry-trust-management skill-scan-review; do
  curl -fsSL --create-dirs -o .claude/skills/goplus-agentguard-$s/SKILL.md https://revampkey.com/marketplace/goplus-agentguard/skills/$s/SKILL.md
done

Ask in plain language, for example “Should I let my agent run this: curl https://example.com/install.sh | bash ?”

Into the shared .agents/skills folder

Connect the GoPlus AgentGuard MCP server in Cursor.

Run this in your project folder to add all 4 skills:

for s in essentials action-risk-check registry-trust-management skill-scan-review; do
  curl -fsSL --create-dirs -o .agents/skills/goplus-agentguard-$s/SKILL.md https://revampkey.com/marketplace/goplus-agentguard/skills/$s/SKILL.md
done

Ask in plain language, for example “Should I let my agent run this: curl https://example.com/install.sh | bash ?”

Into the shared .agents/skills folder

Connect the GoPlus AgentGuard MCP server in Codex.

Run this in your project folder to add all 4 skills:

for s in essentials action-risk-check registry-trust-management skill-scan-review; do
  curl -fsSL --create-dirs -o .agents/skills/goplus-agentguard-$s/SKILL.md https://revampkey.com/marketplace/goplus-agentguard/skills/$s/SKILL.md
done

Ask in plain language, for example “Should I let my agent run this: curl https://example.com/install.sh | bash ?”

Into the shared .agents/skills folder

Connect the GoPlus AgentGuard MCP server in VS Code.

Run this in your project folder to add all 4 skills:

for s in essentials action-risk-check registry-trust-management skill-scan-review; do
  curl -fsSL --create-dirs -o .agents/skills/goplus-agentguard-$s/SKILL.md https://revampkey.com/marketplace/goplus-agentguard/skills/$s/SKILL.md
done

Ask in plain language, for example “Should I let my agent run this: curl https://example.com/install.sh | bash ?”

RevampKey or copy the files?

In RevampKey

One click when you connect GoPlus AgentGuard
Updated for you when a skill improves
Removed when you disconnect
The MCP server is set up for you
800+ other connectors, same way

Download free

Copy into your project

One command per project
Run it again to get updates
You connect the GoPlus AgentGuard MCP server yourself
Works in Claude Code, Cursor, Codex and VS Code

See the command

GoPlus AgentGuard skills FAQ

What is a GoPlus AgentGuard agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each GoPlus AgentGuard skill describes one job, which GoPlus AgentGuard tools to use in which order, what to check first and when to stop and ask you.

Do the GoPlus AgentGuard skills change anything on their own?

4 of the 4 only read. The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in GoPlus AgentGuard.

Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect GoPlus AgentGuard; elsewhere you copy the folders into your project or skills directory.

Do I need the GoPlus AgentGuard MCP server too?

Yes. The skills tell the agent how to do the work; the GoPlus AgentGuard MCP server gives it the tools to do it. The GoPlus AgentGuard MCP setup guide covers every client.

GoPlus AgentGuard MCP server setup · This page as Markdown

Put GoPlus AgentGuard’s best workflows in your agent

Download RevampKey, connect GoPlus AgentGuard and ask your first question in about a minute.

Download RevampKey Connect GoPlus AgentGuard · 1 click

All 4 GoPlus AgentGuard skills

Use GoPlus AgentGuard safely with AI

Use it when

Tools it uses

Check a proposed agent action before it runs

Use it when

Tools it uses

Manage the GoPlus AgentGuard trust registry with AI

Use it when

Tools it uses

Review a skill or plugin before you install it

Use it when

Tools it uses

Get all 4 without copying a file

How GoPlus AgentGuard skills work

How to install GoPlus AgentGuard skills

RevampKey or copy the files?

In RevampKey

Copy into your project

GoPlus AgentGuard skills FAQ

Put GoPlus AgentGuard’s best workflows in your agent

Skills for related tools