agent-governance

Enforce composable policies, pre-flight intent checks, and append-only audit logs for AI agents.

Updated Mar 9, 2026
One-click install
npx skills add https://github.com/jefeish/copilot_agent_mode-crispy-palm-tree --skill agent-governance
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: agent-governance
Source: https://github.com/jefeish/copilot_agent_mode-crispy-palm-tree/tree/main/.github/skills/agent-governance
Command: npx skills add https://github.com/jefeish/copilot_agent_mode-crispy-palm-tree --skill agent-governance

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides patterns and controls to prevent AI agents from performing unsafe or unauthorized actions by enforcing policies, filtering malicious input, rate limiting tool usage, and maintaining immutable audit trails for accountability and compliance.

Core Features & Use Cases

  • Policy-driven tool control: Define composable, serializable policies to allow, deny, or flag tools and content patterns.
  • Pre-flight intent classification: Detect data exfiltration, privilege escalation, prompt injection, and other dangerous intents before tool execution.
  • Tool-level enforcement & audit: Wrap tool functions with decorators that enforce allowlists/blocklists, rate limits, content checks, human review gates, and append-only audit logging.
  • Trust scoring for multi-agent workflows: Maintain per-agent trust scores with temporal decay to gate autonomous actions and delegate decisions.
  • Framework integrations: Recipes for integrating governance with common agent frameworks (PydanticAI, CrewAI, OpenAI Agents) to secure production deployments.

Quick Start

Apply agent-governance to enforce a per-agent policy, run pre-flight intent checks on incoming prompts, and record all allowed and denied tool calls in an append-only audit trail.

Frequently Asked Questions about agent-governance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce policy controls on AI agents calling external APIs?

To enforce policy controls on AI agents calling external APIs, apply composable policies that allow, deny, or flag tool usage. This approach wraps tool functions with decorators to apply rate limits, content filters, and human review gates before execution.

What is pre-flight intent classification for AI agent tools?

Pre-flight intent classification is a mechanism that detects data exfiltration, privilege escalation, and prompt injection before tool execution. It evaluates incoming prompts semantically to prevent AI agents from performing dangerous or unauthorized actions.

How do I add rate limiting and audit logging to multi-agent workflows?

Add rate limiting and audit logging to multi-agent workflows by wrapping tool functions with decorators. This records allowed and denied tool calls in an append-only audit trail and maintains per-agent trust scores with temporal decay to gate autonomous actions.

Can I integrate agent governance with frameworks like CrewAI or PydanticAI?

Yes, you can integrate agent governance with frameworks like CrewAI, PydanticAI, and OpenAI Agents. The Skill provides recipes for securing production deployments by applying policy enforcement and audit trails within these common agent frameworks.

When do I need trust scoring for AI agents accessing databases?

You need trust scoring for AI agents accessing databases when running multi-agent systems in production that require autonomous decision delegation. Trust scoring uses temporal decay to dynamically gate actions based on an agent's recent behavior and compliance.