governclaw-middleware

Governance middleware for OpenClaw agents. Wraps HTTP, shell, file, and browser actions with policy checks via GovernClaw before execution. Required tools - http. Environment variables - GOVERNCLAW_URL (default http://127.0.0.1:8000).

3,891 stars

byopenclaw

View on GitHub Installation ↓

Best use case

governclaw-middleware is best used when you need a repeatable AI agent workflow instead of a one-off prompt.

Teams using governclaw-middleware should expect a more consistent output, faster repeated execution, less prompt rewriting.

When to use this skill

You want a reusable workflow that can be run more than once with consistent structure.

When not to use this skill

You only need a quick one-off answer and do not need a reusable workflow.
You cannot install or maintain the underlying files, dependencies, or repository context.

Installation

Claude Code / Cursor / Codex

$curl -o ~/.claude/skills/governclaw-middleware/SKILL.md --create-dirs "https://raw.githubusercontent.com/openclaw/skills/main/skills/aakash2289/governclaw-middleware/SKILL.md"

Manual Installation

Download SKILL.md from GitHub
Place it in .claude/skills/governclaw-middleware/SKILL.md inside your project
Restart your AI agent — it will auto-discover the skill

How governclaw-middleware Compares

Feature / Agent	governclaw-middleware	Standard Approach
Platform Support	Not specified	Limited / Varies
Context Awareness	High	Baseline
Installation Complexity	Unknown	N/A

Frequently Asked Questions

What does this skill do?

Where can I find the source code?

You can find the source code on GitHub using the link provided at the top of the page.

Related Guides

Best AI Skills for Claude

Explore the best AI skills for Claude and Claude Code across coding, research, workflow automation, documentation, and agent operations.

AI Agents for Marketing

Discover AI agents for marketing workflows, from SEO and content production to campaign research, outreach, and analytics.

AI Agents for Startups

Explore AI agent skills for startup validation, product research, growth experiments, documentation, and fast execution with small teams.

SKILL.md Source

# GovernClaw Middleware

This skill provides **governed wrappers** for sensitive operations. It acts as a policy enforcement layer between agents and external systems.

## When to Use This Skill

**You MUST use governed tools from this skill instead of raw tools when:**

- Calling external HTTP APIs (`governedHttp` instead of `http`)
- Running shell commands (`governedShell` - future)
- Reading/writing files (`governedFile` - future)
- Controlling a browser (`governedBrowser` - future)

## How It Works

1. You call a governed tool (e.g., `governedHttp`)
2. The skill sends your request metadata to GovernClaw for policy evaluation
3. GovernClaw returns `allow` or `block` with a reason
4. If allowed: the underlying operation executes and returns results
5. If blocked: the operation is cancelled and you receive a block reason

## Available Tools

### governedHttp

Makes HTTP requests through the GovernClaw policy engine.

**Parameters:**
- `method` (string): HTTP method - "GET", "POST", "PUT", "DELETE"
- `url` (string): Target URL
- `body` (object, optional): Request body for POST/PUT
- `headers` (object, optional): Custom headers

**Returns:**
- On success: The HTTP response from the target
- On block: `{ ok: false, blocked: true, reason: "..." }`

**Example:**
```typescript
const result = await context.tools.governclawMiddleware.governedHttp({
  method: "GET",
  url: "https://api.example.com/data"
});

if (result.blocked) {
  // Handle policy block
  console.log("Blocked:", result.reason);
}
```

## Configuration

Set the GovernClaw service URL in your environment:

```bash
export GOVERNCLAW_URL="http://127.0.0.1:8000"
```

Or in `openclaw.json`:

```json
{
  "skills": {
    "governclaw-middleware": {
      "env": {
        "GOVERNCLAW_URL": "http://127.0.0.1:8000"
      }
    }
  }
}
```

## Governance Context

The skill automatically forwards these context fields to GovernClaw:

- `parent_id`: The session ID (who owns the request)
- `child_id`: The agent ID (who is making the request)
- `source`: Where the request originated (agent, control, cron, etc.)
- `channel`: The channel ID (if applicable)
- `node_id`: The node ID (if applicable)
- `skill`: Always "governclaw-middleware"

## Error Handling

Always check for `blocked` in responses:

```typescript
const response = await context.tools.governclawMiddleware.governedHttp({...});

if (!response.ok && response.blocked) {
  // Policy violation - do not retry
  return { error: response.reason };
}

if (!response.ok) {
  // Network or other error - may retry
  return { error: "Request failed" };
}

// Success
return response.data;
```

## Policy Modes

GovernClaw supports three governance modes:

- **playground**: Log-only, actions always allowed
- **governed**: Default mode, enforce policies
- **strict**: Block on any uncertainty

The skill defaults to `governed` mode. Future versions may allow per-request mode overrides.

Related Skills

go-middleware

3891

from openclaw/skills

Idiomatic Go HTTP middleware patterns with context propagation, structured logging via slog, centralized error handling, and panic recovery. Use when writing middleware, adding request tracing, or implementing cross-cutting concerns.

---

3891

from openclaw/skills

name: article-factory-wechat

Content & Documentation

humanizer

3891

from openclaw/skills

Remove signs of AI-generated writing from text. Use when editing or reviewing text to make it sound more natural and human-written. Based on Wikipedia's comprehensive "Signs of AI writing" guide. Detects and fixes patterns including: inflated symbolism, promotional language, superficial -ing analyses, vague attributions, em dash overuse, rule of three, AI vocabulary words, negative parallelisms, and excessive conjunctive phrases.

Content & Documentation

find-skills

3891

from openclaw/skills

Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.

General Utilities

tavily-search

3891

from openclaw/skills

Use Tavily API for real-time web search and content extraction. Use when: user needs real-time web search results, research, or current information from the web. Requires Tavily API key.

Data & Research

baidu-search

3891

from openclaw/skills

Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.

Data & Research

agent-autonomy-kit

3891

from openclaw/skills

Stop waiting for prompts. Keep working.

Workflow & Productivity

Meeting Prep

3891

from openclaw/skills

Never walk into a meeting unprepared again. Your agent researches all attendees before calendar events—pulling LinkedIn profiles, recent company news, mutual connections, and conversation starters. Generates a briefing doc with talking points, icebreakers, and context so you show up informed and confident. Triggered automatically before meetings or on-demand. Configure research depth, advance timing, and output format. Walking into meetings blind is amateur hour—missed connections, generic small talk, zero leverage. Use when setting up meeting intelligence, researching specific attendees, generating pre-meeting briefs, or automating your prep workflow.

Workflow & Productivity

self-improvement

3891

from openclaw/skills

Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Claude ('No, that's wrong...', 'Actually...'), (3) User requests a capability that doesn't exist, (4) An external API or tool fails, (5) Claude realizes its knowledge is outdated or incorrect, (6) A better approach is discovered for a recurring task. Also review learnings before major tasks.

Agent Intelligence & Learning

botlearn-healthcheck

3891

from openclaw/skills

botlearn-healthcheck — BotLearn autonomous health inspector for OpenClaw instances across 5 domains (hardware, config, security, skills, autonomy); triggers on system check, health report, diagnostics, or scheduled heartbeat inspection.

DevOps & Infrastructure