Praesidia

PassAudited by ClawScan on May 10, 2026.

Overview

Praesidia appears to be a coherent API helper for agent trust checks and guardrails, but it uses an API key and can send content to or change settings in your Praesidia account.

This skill looks appropriate if you want OpenClaw to interact with Praesidia. Install it only if you trust Praesidia with the relevant agent metadata and any content you ask it to validate, use a scoped API key where possible, and manually review any guardrail changes before relying on them in production.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If installed and configured, the assistant can access Praesidia resources available to your API key, such as agents, organization guardrails, and trust data.

Why it was flagged

The skill requires a Praesidia API key, which allows the assistant to act with whatever Praesidia permissions that key has.

Skill content
"requires":{"env":["PRAESIDIA_API_KEY"]},"primaryEnv":"PRAESIDIA_API_KEY"
Recommendation

Use the least-privileged Praesidia key available, store it securely, and revoke or rotate it if you stop using the skill.

What this means

A guardrail change could block, redact, warn, or otherwise alter agent inputs and outputs in your Praesidia environment.

Why it was flagged

The skill documents a POST request that creates an enabled guardrail configuration, which changes how an agent is protected or moderated.

Skill content
POST ${PRAESIDIA_API_URL}/organizations/{orgId}/guardrails ... "isEnabled": true
Recommendation

Before applying guardrails, confirm the organization ID, agent ID, template, scope, and action; review the resulting configuration in Praesidia.

What this means

Text submitted for validation may include sensitive, regulated, or confidential data and will be processed by the Praesidia service.

Why it was flagged

The validation workflow sends user-provided content to the Praesidia API for guardrail checking.

Skill content
POST ${PRAESIDIA_API_URL}/organizations/{orgId}/guardrails/validate ... "content": "Text to validate"
Recommendation

Only validate content you are authorized to share with Praesidia, and check the provider's retention and privacy settings for your account.

What this means

Users might over-rely on the trust score and skip their own review of permissions, data handling, or operational risk.

Why it was flagged

The suggested wording may encourage users to treat a trust score as a complete safety guarantee.

Skill content
Recommendation: This agent is fully verified and safe for production use.
Recommendation

Treat Praesidia trust scores as one input to a decision, not as a substitute for your own security and compliance review.