integrate-arcjet-guard-crewai

Integrate Arcjet Guard security policies into CrewAI tool execution and inbound message screening.

1|Updated Apr 8, 2026
One-click install
npx skills add https://github.com/arcjet/arcjet-plugin --skill integrate-arcjet-guard-crewai-arcjet
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: integrate-arcjet-guard-crewai
Source: https://github.com/arcjet/arcjet-plugin/tree/main/plugins/arcjet/skills/integrate-arcjet-guard-crewai
Command: npx skills add https://github.com/arcjet/arcjet-plugin --skill integrate-arcjet-guard-crewai-arcjet

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires arcjet, crewai.

What problem does it solve? CrewAI agents execute tools and process inbound messages without built-in security controls, leaving them exposed to prompt injection, PII leakage, and uncontrolled tool usage. This Skill adds Arcjet Guard policy enforcement to CrewAI workflows so risky tool calls are rate-limited and malicious inputs are blocked before execution. ## Core Features & Use Cases - Process-wide tool gating: Register PRE_TOOL_CALL hooks with register_arcjet_hooks and ToolPolicy to enforce rate limits and security rules on every crew-executed tool. - Standalone tool wrapping: Use guard_tool to protect a CrewAI BaseTool you invoke directly, raising ArcjetDeniedError on policy denial. - Inbound message screening: Screen user messages for prompt injection with core guard before crew.kickoff. - Use Case: A support agent crew looks up orders via a tool. Apply a TokenBucket rate limit of 10 lookups per minute per authenticated user, and block prompt injection in inbound messages before the crew starts. ## Quick Start Ask your AI agent to integrate Arcjet Guard into your CrewAI project by registering PRE_TOOL_CALL hooks with rate limits on your tools and screening inbound messages for prompt injection before crew kickoff.

Frequently Asked Questions about integrate-arcjet-guard-crewai

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I add rate limiting to CrewAI tools?▼

Register process-wide PRE_TOOL_CALL hooks with register_arcjet_hooks and a ToolPolicy containing a TokenBucket rule keyed on the authenticated user. A denied decision raises HookAborted so the tool never runs.

How do I block prompt injection in CrewAI agents?▼

Screen inbound messages with the core guard or guard_sync function using DetectPromptInjection before calling crew.kickoff. If the decision conclusion is DENY, stop before the crew runs.

Is there an arcjet[crewai] pip extra to install?▼

No, there is no arcjet[crewai] extra because CrewAI hard-depends on chromadb with unpatched CVEs. Install crewai>=1.15.3,<2 yourself alongside the PyPI arcjet 1.0.0 package.

Can I use an async Arcjet client with CrewAI hooks?▼

No, the CrewAI hook path is synchronous only. Pass a blocking client created with launch_arcjet_sync; an async client is refused at registration with ArcjetMisconfiguration.

Why does my denied CrewAI tool still execute?▼

CrewAI swallows every exception except HookAborted, so raising ArcjetDeniedError from a hook lets the tool run. The hook must raise HookAborted with the denial reason to block execution.

Does this work with LangChain Crew wrappers or npm CrewAI ports?▼

No, this integration supports only the official Python crewai package. It does not support community forks, LangChain Crew wrappers, or npm CrewAI ports.