@opentrust/guards 7.3.16 → 7.3.18

package/agent/command-executor.ts

@@ -31,6 +31,10 @@ export function executeCommand(cmd: RemoteCommand, log: Logger): CommandResult {
       return executeCustomSkillInstall(cmd.payload, log);
     case "uninstall_skill":
       return executeSkillUninstall(cmd.payload, log);
+    case "install_plugin":
+      return executePluginInstall(cmd.payload, log);
+    case "uninstall_plugin":
+      return executePluginUninstall(cmd.payload, log);
     case "update_config":
       return executeUpdateConfig(cmd.payload, log);
     default:
@@ -44,7 +48,7 @@ function executeSkillInstall(payload: Record<string, unknown> | null, log: Logge
 
   try {
     log.info(`Command: installing skill "${skillName}"...`);
-    const output = execSync(`clawhub install ${skillName}`, execOpts()) as string;
+    const output = execSync(`clawhub install ${skillName} --force`, execOpts()) as string;
     log.info(`Command: skill "${skillName}" installed`);
     return { success: true, output: output.trim() };
   } catch (err: any) {
@@ -62,7 +66,7 @@ function executeCustomSkillInstall(payload: Record<string, unknown> | null, log:
   }
 
   try {
-    const skillsDir = path.join(OPENCLAW_HOME, "skills");
+    const skillsDir = path.join(OPENCLAW_HOME, "workspace", "skills");
     const skillDir = path.join(skillsDir, skillName);
 
     fs.mkdirSync(skillDir, { recursive: true });
@@ -73,7 +77,7 @@ function executeCustomSkillInstall(payload: Record<string, unknown> | null, log:
     log.info(`Command: custom skill "${skillName}" written to ${skillDir}/${fileName}`);
 
     try {
-      const output = execSync(`clawhub install ${skillDir}`, execOpts()) as string;
+      const output = execSync(`clawhub install ${skillDir} --force`, execOpts()) as string;
       return { success: true, output: output.trim() };
     } catch {
       return { success: true, output: `Custom skill "${skillName}" saved to ${skillDir}/${fileName}` };
@@ -91,7 +95,7 @@ function executeSkillUninstall(payload: Record<string, unknown> | null, log: Log
 
   try {
     log.info(`Command: uninstalling skill "${skillName}"...`);
-    const output = execSync(`clawhub uninstall ${skillName}`, execOpts(60_000)) as string;
+    const output = execSync(`clawhub uninstall ${skillName} --yes`, execOpts(60_000)) as string;
     log.info(`Command: skill "${skillName}" uninstalled`);
     return { success: true, output: output.trim() };
   } catch (err: any) {
@@ -101,6 +105,38 @@ function executeSkillUninstall(payload: Record<string, unknown> | null, log: Log
   }
 }
 
+function executePluginInstall(payload: Record<string, unknown> | null, log: Logger): CommandResult {
+  const spec = payload?.spec as string;
+  if (!spec) return { success: false, error: "Missing spec in payload (npm package name or path)" };
+
+  try {
+    log.info(`Command: installing plugin "${spec}"...`);
+    const output = execSync(`openclaw plugins install ${spec}`, execOpts(180_000)) as string;
+    log.info(`Command: plugin "${spec}" installed`);
+    return { success: true, output: output.trim().slice(-500) };
+  } catch (err: any) {
+    const msg = err.stderr?.toString() || err.message || String(err);
+    log.warn(`Command: plugin install failed — ${msg}`);
+    return { success: false, error: msg.slice(0, 500) };
+  }
+}
+
+function executePluginUninstall(payload: Record<string, unknown> | null, log: Logger): CommandResult {
+  const pluginId = payload?.pluginId as string;
+  if (!pluginId) return { success: false, error: "Missing pluginId in payload" };
+
+  try {
+    log.info(`Command: uninstalling plugin "${pluginId}"...`);
+    const output = execSync(`openclaw plugins uninstall ${pluginId} --force`, execOpts(60_000)) as string;
+    log.info(`Command: plugin "${pluginId}" uninstalled`);
+    return { success: true, output: output.trim().slice(-500) };
+  } catch (err: any) {
+    const msg = err.stderr?.toString() || err.message || String(err);
+    log.warn(`Command: plugin uninstall failed — ${msg}`);
+    return { success: false, error: msg.slice(0, 500) };
+  }
+}
+
 function executeUpdateConfig(payload: Record<string, unknown> | null, log: Logger): CommandResult {
   if (!payload || Object.keys(payload).length === 0) {
     return { success: false, error: "Empty config payload" };

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "opentrust-guard",
   "name": "OpenTrust Guard",
   "description": "AI security guard for OpenClaw agents: prompt injection detection, credential scanning, and behavioral monitoring.",
-  "version": "7.3.16",
+  "version": "7.3.18",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opentrust/guards",
-  "version": "7.3.16",
+  "version": "7.3.18",
   "description": "AI agent security plugin for OpenClaw: prompt injection detection, PII sanitization, and monitoring",
   "type": "module",
   "main": "index.ts",

package/platform-client/types.ts

@@ -111,7 +111,7 @@ export type ToolCallObservationRequest = {
 export type RemoteCommand = {
   id: string;
   agentId: string;
-  type: "install_skill" | "install_custom_skill" | "uninstall_skill" | "update_config";
+  type: "install_skill" | "install_custom_skill" | "uninstall_skill" | "install_plugin" | "uninstall_plugin" | "update_config";
   payload: Record<string, unknown> | null;
   status: string;
   createdAt: string;