agent-governance

Enforce governance policies and audit trails on AI agent tool calls.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/mmahalwy/cooper --skill agent-governance-mmahalwy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: agent-governance
Source: https://github.com/mmahalwy/cooper/tree/main/.agents/skills/agent-governance
Command: npx skills add https://github.com/mmahalwy/cooper --skill agent-governance-mmahalwy

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

AI agents that call external tools can perform unsafe, unauthorized, or non-compliant actions; this Skill provides patterns to enforce policy, detect dangerous intent before execution, limit risky operations, and maintain immutable audit trails so agents act within defined boundaries.

Core Features & Use Cases

  • Composable Governance Policies: Declare allowlists, blocklists, blocked content patterns, rate limits, and human-approval hooks as serializable policies that compose with most-restrictive-wins semantics.
  • Pre-flight Intent Classification: Catch prompt injection, data exfiltration, and privilege escalation attempts before tools are invoked using weighted threat signals.
  • Tool-Level Enforcement & Auditing: Apply decorators to tool functions to enforce policies, rate limits, content checks, and to emit append-only audit entries; track inter-agent trust with decay-based scoring.
  • Use Case: Secure a customer-support agent that can query databases and create tickets while preventing credential leaks, enforcing review for sensitive actions, and exporting audit logs for compliance.

Quick Start

Use the agent-governance skill to wrap your agent's tool functions with policy checks, pre-flight intent classification, and append-only auditing so all tool calls are validated and recorded.

Frequently Asked Questions about agent-governance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce safety policies on AI agents that call external APIs?

You can enforce safety policies on AI agents by applying composable governance decorators to tool functions, implementing allowlists, blocklists, and rate limits to restrict risky operations before execution.

What is pre-flight intent classification for AI agent security?

Pre-flight intent classification for AI agent security evaluates tool call prompts using weighted threat signals to catch prompt injection, data exfiltration, and privilege escalation attempts before any tool is invoked.

How do I maintain an audit trail for AI agent tool calls?

You can maintain an audit trail for AI agent tool calls by wrapping tool functions with governance decorators that automatically emit append-only audit entries, recording every validated action for compliance review.

Can I require human approval for sensitive actions performed by my AI agent?

Yes, you can require human approval for sensitive actions by configuring composable governance policies with human-approval hooks, ensuring that restricted operations pause for review before execution.

How do I prevent prompt injection attacks in multi-agent systems?

You can prevent prompt injection attacks in multi-agent systems by applying pre-flight intent classification to detect malicious inputs and tracking inter-agent trust with decay-based scoring to limit delegations.

Do I need external dependencies to add governance controls to my agents?

No, you do not need external dependencies to add governance controls; this skill provides self-contained patterns for policy enforcement, intent classification, trust scoring, and auditing without external libraries.