sigui-security

name: sigui-security version: "2.0.1" description: > AI security oracle for blockchain transactions. Evaluates EVM, Starknet, and Aptos transactions in real time using the Sigui Protocol — detecting drain stars, mixer chains, Sybil swarms, and flash-loan exploits before execution. Returns ALLOW / BLOCK / ESCALATE with an on-chain proof. Requires a real Sigui API endpoint; demo mode available for testing. author: "Warma Abdoul Ibonon Eric ericwarma2006@gmail.com" homepage: "https://github.com/ibonon/Sigui" license: MIT tags:

• blockchain
• security
• web3
• defi
• ai-agent
• ethereum
• starknet
• aptos read_when:
• The user explicitly asks to evaluate, audit, or check the safety of a specific blockchain transaction before sending it
• The user says "check this address", "is this contract safe", or "evaluate this transaction" and provides concrete parameters (address, amount, chain)
• The user reports a suspected rug pull, drain attack, phishing approval, or flash-loan exploit they want analyzed
• An autonomous agent is about to submit an on-chain transaction and needs security clearance install: run: bash install.sh requires: python: ">=3.10" packages:
  • "sigui-sdk>=0.3.1"
  • "rich>=13.0.0"

Sigui Protocol Security Skill 🛡️

Sigui is a multi-chain AI security oracle that evaluates blockchain transactions before they execute, using a native Spatio-Temporal Transformer (Trustformer/T-GAT) to detect coordinated attacks in real time.

[!IMPORTANT] This skill requires a real Sigui API endpoint for production use. Set SIGUI_API_URL to your node URL. Without it, the script exits safely (fail-closed). A --demo flag is available for testing, but MUST NOT be used to authorize real funds.

🔐 Security Model

This skill is designed with a fail-closed security policy:

🧠 Agent Instructions (Chain of Thought)

When a user explicitly asks to evaluate a specific transaction, follow these steps:

Step 1 — Extract Parameters

Identify from the user's message:

• amount: transaction value (convert to USDC equivalent if needed)
• destination: the target wallet or contract address
• chain: the blockchain (default arc)
• action: the action type (transfer, approve, swap, bridge, mint)

If any required parameter is missing, ask the user before running the evaluation.

Step 2 — Ask for Explicit Confirmation Before Running

Before executing the script, show the user:

"I'm about to evaluate this transaction with the Sigui security oracle:

• Amount: {amount} USDC
• Destination: {destination}
• Chain: {chain}
• Action: {action} Shall I proceed?"

Step 3 — Run the Evaluation

python ~/.openclaw/workspace/skills/sigui-security/evaluate.py \
  --amount {amount} \
  --destination {destination} \
  --action {action} \
  --chain {chain}

Step 4 — Interpret the Exit Code

Step 5 — After ALLOW: Require User Confirmation

Re-run with --confirmed only after the user explicitly says yes:

python evaluate.py --amount {amount} --destination {destination} \
  --action {action} --chain {chain} --confirmed

🛠️ Setup

1. Install Dependencies (automatic)

The skill auto-installs sigui-sdk when first run. Or run manually:

bash ~/.openclaw/workspace/skills/sigui-security/install.sh

2. Configure Your Sigui Endpoint (required for production)

export SIGUI_API_URL="https://your-sigui-node.com"
export SIGUI_CHAIN="arc"           # Optional, default: arc
export OPENCLAW_AGENT_ID="my_agent"  # Optional

3. Test in Demo Mode (non-authoritative)

python evaluate.py --amount 50 --destination 0xYourAddress --demo

⚠️ Demo mode output is a local heuristic simulation, NOT an oracle evaluation. Never use demo results to authorize transactions.

📊 Verdict Table

Safety Score = (1 - risk_score) × 1000. Higher = safer.

🛡️ Threats Detected

🔗 Links

• 📄 GitHub: https://github.com/ibonon/Sigui
• 📦 PyPI: https://pypi.org/project/sigui-sdk/
• 🌐 ClawHub: https://clawhub.ai/ibonon/sigui-security
• 📖 Whitepaper: Sigui Protocol: A Real-Time Security Oracle for Autonomous AI Agents