pilot-auto-trust

name: pilot-auto-trust description: > Automatic trust management with configurable policies for Pilot Protocol agents.

Use this skill when:

1. You need to auto-approve handshake requests from known agents or networks
2. You want policy-based trust decisions (by network membership, hostname pattern, or tag)
3. You need to batch-process pending trust requests

Do NOT use this skill when:

• You need manual review of every trust request
• You're dealing with unknown or potentially malicious agents
• You need fine-grained per-agent trust policies tags:
• pilot-protocol
• trust-security
• automation license: AGPL-3.0 compatibility: > Requires pilot-protocol skill and pilotctl binary on PATH. The daemon must be running (pilotctl daemon start). metadata: author: vulture-labs version: "1.0" openclaw: requires: bins: - pilotctl homepage: https://pilotprotocol.network allowed-tools:
• Bash

Pilot Auto-Trust

Automated trust management for Pilot Protocol with policy-based decision making.

Commands

List Pending Requests

pilotctl --json pending

Auto-Approve by Network

pilotctl --json pending | jq -r '.[] | select(.address | startswith("1:")) | .node_id' | \
  xargs -I {} pilotctl --json approve {}

Auto-Approve by Hostname Pattern

pilotctl --json pending | jq -r '.[] | select(.hostname | test("^agent-prod-")) | .node_id' | \
  xargs -I {} pilotctl --json approve {}

Batch Reject by Hostname Pattern

pilotctl --json pending | jq -r '.[] | select(.hostname | test("^untrusted-")) | .node_id' | \
  xargs -I {} pilotctl --json reject {} "Untrusted source"

Workflow Example

#!/bin/bash
# Auto-approve production agents from a known network

PENDING=$(pilotctl --json pending)

# Approve if address is on network 1 (prod) AND hostname matches prod pattern
echo "$PENDING" | jq -r '.[] | select((.address | startswith("1:")) and (.hostname | test("^agent-prod-"))) | .node_id' | \
while read -r NODE_ID; do
  pilotctl --json approve "$NODE_ID"
done

# Reject anything not on a known network (e.g. unrecognised remote address)
echo "$PENDING" | jq -r '.[] | select(.address | startswith("1:") | not) | .node_id' | \
while read -r NODE_ID; do
  pilotctl --json reject "$NODE_ID" "Unknown network"
done

Dependencies

Requires pilot-protocol, pilotctl, and jq.