agent-sentinel

---
name: agent-sentinel
description: Local-first budget and policy guardrails for agent actions, with optional remote sync to AgentSentinel.
homepage: https://github.com/jimmystacks/agent-sentinel
metadata: {"openclaw":{"emoji":"🛡️","homepage":"https://github.com/jimmystacks/agent-sentinel/tree/main/skills/agent-sentinel","primaryEnv":"AGENT_SENTINEL_API_KEY","files":["sentinel_wrapper.py","README.md","CHANGELOG.md"],"requires":{"bins":["python3"]}}}
---

# AgentSentinel Protection Layer

Use this skill when you want a local policy gate before an agent performs a costly or risky action.

This OpenClaw skill is the lightweight entry point to the broader AgentSentinel product:
- this skill for local-first OpenClaw guardrails
- AgentSentinel SDK for deeper Python agent instrumentation
- AgentSentinel platform for centralized monitoring, dashboards, and approval workflows

AgentSentinel is local-first by default:
- Policy checks run locally.
- Budget tracking runs locally.
- No remote sync is attempted unless the operator runs `sync` with an API key configured.

## When To Use It

Use AgentSentinel before:
- expensive model or API calls
- file deletion or destructive shell commands
- high-volume automation loops
- actions that should be blocked by policy or capped by budget

## Commands

### `check`

Check whether a proposed action is allowed under the current local policy and budget.

```bash
python3 sentinel_wrapper.py check --cmd "rm -rf build" --cost 0.05
```

### `status`

Show the current local status, including budget usage and whether optional remote sync is enabled.

```bash
python3 sentinel_wrapper.py status
```

### `sync`

Upload locally recorded events to AgentSentinel cloud when `AGENT_SENTINEL_API_KEY` is set.

```bash
python3 sentinel_wrapper.py sync
```

### `bootstrap`

Create a default `callguard.yaml` in the current workspace if one does not already exist.

```bash
python3 sentinel_wrapper.py --bootstrap
```

### `reset`

Reset local tracked spend