Add a security layer before skills touch your agent.

Chitin gates installs, enforces runtime permissions, and pulls in a global revocation network — helping risky and revoked skills get flagged, blocked, or removed according to your policy.

• Verified marketplace

  Reviewed skill versions include static analysis, SBOM/CVE checks, LLM security review, and risk scores.

• Block, not warn

  Plugin gates `before_install` and tool calls. Revocation sync helps block or remove newly revoked skills quickly.

• See what your agent is doing

  Per-skill threat counts, blocked-vs-allowed events, real-time live feed (Shield).

• One backend, every platform

  OpenClaw today, Hermes + MCP next. Same security model, adapted to each agent runtime.