SkillGuard

The firewall between AI agents and your Solana wallet.

SkillGuard lets Solana agents ask for wallet actions without receiving private keys: policies filter each manifest, the user approves from mobile, and Solana records the proof.

Submission Links

Resource	Link
Demo video	https://youtu.be/sb2B-vPU9l8
Live site	https://skillguard-sol.vercel.app/
Live API	https://skillguard-sol.vercel.app/api
GitHub repository	https://github.com/VincenzoImp/skillguard
Solana devnet program	`HScpxWTMba1w73S4Qc7RZLm8nTj1SnRNBiANWbgaNNam`
Android APK download	https://github.com/VincenzoImp/skillguard/releases/download/v0.1.0-devnet/skillguard.apk
Local APK artifact	`build/mobile/skillguard.apk`
Brand logo	`assets/brand/icon.png`

Problem

Solana agent skills make it increasingly easy for AI agents to call wallets, DeFi protocols, infrastructure APIs, and paid resources. The missing layer is user control:

users need to understand what an agent wants to do before signing
agents need a standard way to request approval without receiving private keys
hackathon demos need a clear audit trail for approvals, rejections, and revocations

Solution

SkillGuard turns agent output into an ActionManifest, checks it against a per-agent policy, shows the wallet impact in an Android approval inbox, and records the decision through a small Anchor receipt program.

Agent proposes action
  -> ActionManifest
  -> policy evaluation
  -> Android approval / rejection / revocation
  -> Mobile Wallet Adapter signing
  -> SkillGuard Solana receipt

The hosted API is the public integration surface for agents and third-party apps. A fresh mobile wallet has no agents and no inbox items. The user first imports an agent with a pairing link or agent ID, signs a wallet-owner challenge, and only then can that connected agent submit manifests for that wallet through the API or SDK. Wallet feeds and push-token registration are scoped by a short-lived wallet session token created from a Solana sign-message proof. When an agent creates a new pending request, the hosted API fans out an Expo push to registered devices for that wallet; the live inbox remains the source of truth and can always be refreshed manually. Allow under limits is deliberately conservative: it can auto-approve only low-risk, zero-spend manifest-only requests. Any spending request, non-low-risk request, or raw transaction still requires wallet review.

Architecture

flowchart LR
  A[Solana agent or demo agent] --> B[SkillGuard SDK]
  B --> C[SkillGuard API]
  C --> D[Canonical manifest hash]
  C --> E[Policy engine]
  E --> F[Android approval inbox]
  F --> G[Mobile Wallet Adapter]
  G --> H[SkillGuard Anchor program]
  H --> I[ActionReceipt account]
  F --> J[Edit policy or revoke agent]
  J --> E

Core workspaces:

packages/protocol: shared manifest types, canonical hashing, fixtures, policy engine
packages/sdk: TypeScript client for agent developers
apps/api: public API for agents, connections, policy evaluation, push-token registration, wallet decisions, smoke cleanup, and connection revocation
apps/research-agent: real autonomous research-agent loop for a connected wallet address
apps/mobile: Android approval app using live API state and the SkillGuard design system
apps/site: Vercel multi-page public project site, API docs, and canonical visual reference
programs/skillguard: Anchor program for user profiles, agent policies, revocation, and receipts

Demo Flow

The judge demo is a 3-minute vertical slice:

User opens the Android app and connects a devnet wallet.
The wallet starts with zero agents; user scans the Demo Agent pairing QR from /developers, reviews the pairing metadata, signs the wallet-owner challenge, and configures spend, protocol, mint, and approval limits.
Demo agent runs the autonomous demo loop and submits requests for that wallet address through the API after the user-created connection exists.
Pending requests arrive in the mobile inbox and, on supported builds/devices, as native push notifications.
Low-risk zero-spend requests can be auto-approved only when the user switches that specific agent to Allow under limits.
Unsafe requests are blocked before wallet signing.
Spending requests can be approved from mobile with a real devnet SOL transfer and a SkillGuard receipt transaction.
User can reject requests, revoke the agent, and edit the policy mode; future requests are re-evaluated.

See docs/DEMO.md for exact commands and spoken lines.

Run The Hosted Live Demo

Use this path for the phone demo against the Vercel API:

scripts/live-demo.sh <connected-mobile-wallet-address>

The script opens the styled Demo Agent pairing QR, waits until the mobile app shows the imported agent, then starts the real autonomous agent loop: free scan, 0.001 SOL paid report, and blocked 0.05 SOL upgrade. It reads the live agent signing key from ~/.skillguard/agent-research-live-230105.env; that file stays outside the repository.

Run The Local Demo

cp .env.example .env
. scripts/dev-env.sh
scripts/dev-demo.sh

The script starts the API and project site. It prints the Android command and waits for a real connected wallet address before any agent request is submitted. If port 5173 is already used, run:

SKILLGUARD_SITE_PORT=5174 scripts/dev-demo.sh

In a second terminal, run the mobile app when the script prints the Android command. On Android emulator, the app reaches the host API through http://10.0.2.2:8787.

After connecting the wallet, copy the full wallet address from the app and submit real requests in a third terminal. For the standard demo, open https://skillguard-sol.vercel.app/developers on another screen and scan the Demo Agent pairing QR from the app's Pair tab. If camera access is not available, paste this pairing link into the manual fallback field, review the limits, and sign the import challenge:

skillguard://pair?agentId=agent-research&name=Demo%20Agent&description=Solana%20demo%20agent%20that%20requests%20wallet-safe%20actions.&protocols=helius,birdeye&publicKey=9hSR6S7WPtxmTojgo6GG3k4yDPecgJY292j7xrsUGWBu

Manual import values:

Agent ID: agent-research
Display name: Demo Agent
Allowed purpose: Solana demo agent that requests wallet-safe actions.
Mode: Ask every time
Max spend per action: 0.01 SOL
Daily cap: 0.05 SOL
Allowed protocols: helius,birdeye
Allowed mints: SOL
Agent public key: 9hSR6S7WPtxmTojgo6GG3k4yDPecgJY292j7xrsUGWBu

Generate a new agent identity and pairing link for another agent:

node scripts/generate-agent-key.mjs agent-mybot "My Agent"

Keep SKILLGUARD_AGENT_PRIVATE_KEY_B58 in your password manager or agent runtime secret store. Only the public key belongs in the pairing link.

Manual commands:

npm --prefix apps/api run dev

export SKILLGUARD_API_URL=http://localhost:8787
export SKILLGUARD_USER_WALLET=<connected-mobile-wallet-address>
export SKILLGUARD_AGENT_PRIVATE_KEY_B58=<agent-secret-key-from-password-manager>
npm --prefix apps/research-agent run agent:loop

# Lower-level smoke commands remain available:
npm --prefix apps/research-agent run submit:unsafe
npm --prefix apps/research-agent run submit:safe
npm --prefix apps/research-agent run submit:revoked

For a hosted API, build/run the mobile app with:

EXPO_PUBLIC_SKILLGUARD_API_URL=https://skillguard-sol.vercel.app/api npm --prefix apps/mobile run android

Build the installable Android APK:

. scripts/dev-env.sh
scripts/build-mobile-apk.sh

The script writes exactly one canonical APK and removes stale APKs from build/mobile before copying the new artifact:

build/mobile/skillguard.apk

By default this is the standalone debug-signed build with the JavaScript bundle embedded and the hosted API endpoint baked in. To build the same canonical output with the final upload keystore, use the release profile and secrets kept outside git:

SKILLGUARD_ANDROID_BUILD_PROFILE=release \
SKILLGUARD_ANDROID_KEYSTORE_PATH=/absolute/path/to/skillguard-upload.jks \
SKILLGUARD_ANDROID_KEYSTORE_PASSWORD=... \
SKILLGUARD_ANDROID_KEY_ALIAS=skillguard-upload \
SKILLGUARD_ANDROID_KEY_PASSWORD=... \
scripts/build-mobile-apk.sh

Both profiles write build/mobile/skillguard.apk. The APK is a local build artifact ignored by git. The standalone profile is debug-signed; the release profile uses an external keystore through Gradle signing injection.

Agent SDK

import { createSkillGuardClient } from "@skillguard/sdk";
import bs58 from "bs58";
import nacl from "tweetnacl";

const agentKeyPair = nacl.sign.keyPair.fromSecretKey(
  bs58.decode(process.env.SKILLGUARD_AGENT_PRIVATE_KEY_B58!)
);

const client = createSkillGuardClient({
  apiUrl,
  agentId,
  agentSigner: {
    publicKey: bs58.encode(agentKeyPair.publicKey),
    signMessage: (message) => nacl.sign.detached(message, agentKeyPair.secretKey),
  },
  connectionId: `conn-${agentId}-${userWallet}`,
});
const action = await client.submitAction(manifest);
const decision = await client.onDecision(action.actionId);

Agents never receive the user's private key. They register an immutable public key, sign each action request with their own key, submit a manifest to SkillGuard, and wait for a decision.

Solana Program

Anchor program ID: HScpxWTMba1w73S4Qc7RZLm8nTj1SnRNBiANWbgaNNam
Program path: programs/skillguard
Network: devnet
Deploy transaction: 5qQzTVjGXrGQiMRAD6vaSt3aKTXLHVB7SwZBtfxoYFPZ753hdeSp2gVLavVBNZtXrsF6cdJ5QQHa4GVkdp6mrtom
ProgramData address: 3sFMAGAUY2KwcE9PsM1peQisLkzXWfAjsqXHZR9aZ3By
IDL account: 7DosFKnbsmXM1CFM2gAi1Y5AUuRqBE31RjFJtU5osz46
Upgrade authority: Dd6tZmDnTaj9peCbFYdx91CzUEk9YGm1xYqct1UkTdTx

Verified with:

solana program show HScpxWTMba1w73S4Qc7RZLm8nTj1SnRNBiANWbgaNNam

The program stores compact public facts:

user profile
agent connection and policy
revocation state
action receipt with manifest hash
optional execution signature hash

Security Boundary

SkillGuard enforces policy only for actions that go through SkillGuard.

New agent connections require a wallet-owner sign-message proof, so requests can only appear for agents the wallet owner actively imported. Agents must sign each action manifest with the public key registered in the pairing flow. Policy edits, revocation, manual approval/rejection, and wallet feed reads also require wallet-owner proof or a short-lived wallet session. The MVP does not claim universal wallet protection, does not custody funds, and does not give agents private keys. Token-moving actions still require user wallet signing unless a future limited delegation module is added.

Public Site

The project site lives in apps/site and is the public product narrative for judges and developers. It frames SkillGuard as a wallet firewall for onchain AI agents: allow safe automation, ask for sensitive consent, block dangerous requests, and revoke agent access.

npm --prefix apps/site run dev -- --host 0.0.0.0

It includes the public pitch, three-minute demo framing, how-it-works flow, developer SDK snippet, live API surface, and security boundary. The committed animated story demo lives in apps/site/public/demo/story/ and is served at /demo/story/index.html by the site.

Hackathon Scope

Core scope:

Solana: Anchor/Rust receipt program.
Solana Mobile: Android approval app using Mobile Wallet Adapter.
Agents: deterministic demo agent plus reusable TypeScript SDK.
UX: safe request, unsafe request, approval, rejection, revocation, receipt timeline.

Optional extensions after the vertical slice is stable:

LI.FI route preview.
x402 paid risk report.
Solana Agent Kit generated action manifests.

Repository Layout

apps/
  mobile/       Android app, Mobile Wallet Adapter, approval UX
  api/          SkillGuard API, policy engine, webhooks
  research-agent/   Sample agent that integrates with SkillGuard
  site/        Public project site, visual source of truth, and story demo
programs/
  skillguard/   Anchor program for agent connections, policies, receipts
packages/
  sdk/          TypeScript SDK for agent developers
docs/
  PRODUCT.md
  STRATEGY.md
  ROADMAP.md
  FEASIBILITY.md
  CRITICAL_FEASIBILITY_STUDY.md
  ARCHITECTURE.md
  DESIGN_SYSTEM.md
  DEMO.md
  superpowers/plans/2026-05-08-skillguard-mvp.md
assets/
  brand/

Planning Docs

Development Standard

Every implementation step follows the operating protocol:

test -> implement -> document -> verify -> stage -> pre-commit -> audit -> fix -> re-verify -> commit -> next step

See Operating Protocol.

For local Solana and Android commands on the verified macOS/Homebrew setup:

. scripts/dev-env.sh

Status

Core MVP is implemented locally: shared protocol, API, Anchor receipt program, mobile approval app with live API state and push registration, autonomous research-agent loop, TypeScript SDK, and Vercel public site/API all run behind the precommit gate.

Verified submission proofs:

Demo video: https://youtu.be/sb2B-vPU9l8
Vercel production site/API: https://skillguard-sol.vercel.app/, https://skillguard-sol.vercel.app/api
GitHub repository: https://github.com/VincenzoImp/skillguard
Android APK download: https://github.com/VincenzoImp/skillguard/releases/download/v0.1.0-devnet/skillguard.apk
Devnet program: HScpxWTMba1w73S4Qc7RZLm8nTj1SnRNBiANWbgaNNam
Mobile Wallet Adapter record_decision signature: 5FQoAasPEDvWuNcpDcHzJS3svM8Mz8v2Nnkjw2PSEYLNPAtjNeR1CCw6vzKumKPF8EydB5yv8nQKTwW4LsotRijF
Canonical installable Android APK: build/mobile/skillguard.apk
Release signing pipeline: SKILLGUARD_ANDROID_BUILD_PROFILE=release scripts/build-mobile-apk.sh
Final owner-controlled upload keystore generated outside git and ready for the canonical release APK.
Password manager backup of the final upload keystore and signing env is complete.
Vercel deploy: connected Git integration for https://skillguard-sol.vercel.app/
Hosted API durable storage expects Vercel KV or Upstash Redis env vars documented in docs/VERCEL.md.
Hosted API smoke: node scripts/hosted-smoke.mjs

Name		Name	Last commit message	Last commit date
Latest commit History 100 Commits
.githooks		.githooks
api		api
apps		apps
assets/brand		assets/brand
docs		docs
packages		packages
programs/skillguard		programs/skillguard
scripts		scripts
.env.example		.env.example
.gitignore		.gitignore
.vercelignore		.vercelignore
README.md		README.md
package-lock.json		package-lock.json
package.json		package.json
vercel.json		vercel.json

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Repository files navigation

SkillGuard

Submission Links

Problem

Solution

Architecture

Demo Flow

Run The Hosted Live Demo

Run The Local Demo

Agent SDK

Solana Program

Security Boundary

Public Site

Hackathon Scope

Repository Layout

Planning Docs

Development Standard

Status

About

Uh oh!

Releases 1

Packages

Uh oh!

Contributors

Uh oh!

Languages

Folders and files

Latest commit

History

Repository files navigation

SkillGuard

Submission Links

Problem

Solution

Architecture

Demo Flow

Run The Hosted Live Demo

Run The Local Demo

Agent SDK

Solana Program

Security Boundary

Public Site

Hackathon Scope

Repository Layout

Planning Docs

Development Standard

Status

About

Topics

Resources

Uh oh!

Stars

Watchers

Forks

Releases 1

Packages 0

Uh oh!

Contributors

Uh oh!

Languages

Packages