agent-sec-core

Enforce a three-phase OS-level security workflow before agent decisions.

327|85|Updated Mar 30, 2026
One-click install
npx skills add https://github.com/alibaba/anolisa --skill agent-sec-core
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: agent-sec-core
Source: https://github.com/alibaba/anolisa/tree/main/src/agent-sec-core/skill
Command: npx skills add https://github.com/alibaba/anolisa --skill agent-sec-core

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pgpy, and includes scripts (resource) and references (resource) components.

What problem does it solve?

按照Agent Sec Core安全核心原则,在每次Agent执行时先执行安全检查工作流(包含Phase 1-3子步骤),再执行安全决策流程,并将安全检查结果作为决策输入。在Agent执行、部署、安全审计或提及Agent安全时自动应用。

Core Features & Use Cases

  • 统一的三阶段安全检查(Phase 1-3)和安全决策流程,确保执行前的合规性与可审计性。
  • 与子 Skill 与资产基线协同工作,自动化系统加固、资产校验与最终确认。
  • 可扩展至代理运行环境的各类安全场景,包括部署、审计和响应。

Quick Start

只需在需要执行 Agent 的场景中激活该 Skill,系统将自动执行 Phase 1-3 并在通过后进入安全决策流程。

Frequently Asked Questions about agent-sec-core

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate OS-level security checks before agent execution?

To automate OS-level security checks before agent execution, activate this Skill to enforce a three-phase safety workflow with explicit gate rules. It feeds Phase 1 through Phase 3 check results directly into the security decision process.

What is a three-phase safety workflow for agent deployment?

A three-phase safety workflow for agent deployment is a repeatable, auditable process that applies Phase 1 through Phase 3 checks before any decision is made. It logs results to ensure compliance during execution and security auditing.

How do I ensure my agent security auditing process remains auditable?

You ensure agent security auditing remains auditable by applying a unified three-phase safety workflow with explicit gate rules and result logging. This process satisfies requirements for repeatable security checks across deployment and execution.

Does this agent security core support integration with system hardening and asset verification?

Yes, the agent security core supports optional integration with hardening, asset verification, and final confirmation sub-skills. It automates system hardening and asset baseline verification协同 alongside the core safety checks.

Do I need pgpy installed to run the agent security policy checks?

Yes, you need the pgpy dependency installed to run the agent security policy checks. The Skill relies on this library to execute its scripts and enforce OS-level sandboxing and verification workflows.

When should I not use automated sandboxing for agent execution?

You should avoid automated sandboxing for agent execution if your workflow bypasses explicit gate rules or lacks result logging capabilities. The Skill requires a repeatable, auditable process to properly feed security decisions across all phases.