What problem does it solve?
AI agents that call external tools can perform unsafe, unauthorized, or non-compliant actions; this Skill provides patterns to enforce policy, detect dangerous intent before execution, limit risky operations, and maintain immutable audit trails so agents act within defined boundaries.
Core Features & Use Cases
- Composable Governance Policies: Declare allowlists, blocklists, blocked content patterns, rate limits, and human-approval hooks as serializable policies that compose with most-restrictive-wins semantics.
- Pre-flight Intent Classification: Catch prompt injection, data exfiltration, and privilege escalation attempts before tools are invoked using weighted threat signals.
- Tool-Level Enforcement & Auditing: Apply decorators to tool functions to enforce policies, rate limits, content checks, and to emit append-only audit entries; track inter-agent trust with decay-based scoring.
- Use Case: Secure a customer-support agent that can query databases and create tickets while preventing credential leaks, enforcing review for sensitive actions, and exporting audit logs for compliance.
Quick Start
Use the agent-governance skill to wrap your agent's tool functions with policy checks, pre-flight intent classification, and append-only auditing so all tool calls are validated and recorded.