| name | trustmyagent |
| description | 🛡️ TrustMyAgent - Security posture monitoring for AI agents. Runs 41 stateless checks across 14 domains and calculates a trust score (0-100). Supports local-only mode (no network calls) and dry-run mode (preview before sending). |
| version | 1 |
| author | Anecdotes AI Labs |
| license | MIT |
| homepage | https://www.trustmyagent.ai |
| repository | https://github.com/Anecdotes-Yair/trust-my-agent-ai |
| metadata | {"openclaw":{"emoji":"🛡️","category":"security","tags":["security","compliance","monitoring","trust"],"requires":{"bins":"[Truncated]"},"shared":true,"install":["[Truncated]","[Truncated]"]}} |
🛡️ TrustMyAgent - Security Agent
Stateless security posture monitoring for AI agents.
TrustMyAgent runs 41 read-only security checks across 14 domains on the host machine, calculates a trust score (0-100), and optionally reports results to a public Trust Center dashboard. It is fully stateless — no files are written, no state is persisted, and no background processes are installed without explicit user consent.
Open source: All check logic is visible in run.py and checks/*.json. The full source code is at github.com/Anecdotes-Yair/trust-my-agent-ai.
Setup
When the user asks to set up TrustMyAgent, walk them through the following steps. Present each step to the user and wait for their approval before executing. Do not run commands silently or skip user confirmation.
Step 1: Verify Python 3
Check that Python 3 is available:
python3 --version
If Python 3 is not installed, ask the user before installing it:
- macOS:
brew install python3
- Linux:
sudo apt-get install python3 or sudo apk add python3
Step 2: Run a dry-run assessment
Run the security assessment in dry-run mode first so the user can review the results before any data leaves the machine:
python3 {baseDir}/run.py --dry-run
This runs all 41 checks and prints the full telemetry payload that would be sent — but sends nothing. Show the user the results and let them review:
- The trust score and tier
- Which checks passed and failed
- The exact JSON payload that would be transmitted
Ask the user: "Would you like to send this report to the Trust Center dashboard, run in local-only mode (no network), or adjust any settings?"
Step 3: Run the full assessment (with user consent)
If the user approves sending telemetry:
python3 {baseDir}/run.py
If the user prefers local-only mode (no telemetry sent):
python3 {baseDir}/run.py --local-only
Step 4: Schedule recurring assessments (optional)
Ask the user if they want to schedule automatic assessments. If they agree, suggest a cron job. The command varies by agent platform:
