guardrails

Enforce safety gating on agent tool calls to prevent destructive actions.

1|Updated May 6, 2026
One-click install
npx skills add https://github.com/jacob-balslev/skill-graph --skill guardrails-jacob-balslev
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: guardrails
Source: https://github.com/jacob-balslev/skill-graph/tree/main/marketplace/skills/guardrails
Command: npx skills add https://github.com/jacob-balslev/skill-graph --skill guardrails-jacob-balslev

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill prevents agents from causing irreversible damage or leaking sensitive information by enforcing safety checks around planning, tool calls, and protected operations.

Core Features & Use Cases

  • Proactive safety gating: classifies high-risk intent and determines whether actions should be blocked, confirmed, warned, or logged.
  • Tool-call tripwires: places guardrails immediately before and after side-effecting tool invocations to reduce “delegated mutation” risk.
  • Protected-operation coverage: detects destructive git operations, sensitive file/secret exposure, unbounded or destructive SQL patterns, and risky deployment/publication actions.
  • Action auditability: captures evidence for blocks, bypasses, and escalations so incidents can be reconstructed and reviewed.

Quick Start

Ask an AI agent to use the guardrails skill before running any tool that might touch protected files, execute destructive git or SQL commands, or perform deployments or credential-affecting operations.

Frequently Asked Questions about guardrails

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent AI agents from executing destructive git or SQL commands?

To prevent destructive git or SQL commands, enforce safety gating for agents and tool-using assistants by classifying high-risk intent and placing tripwires immediately before and after side-effecting tool invocations to block irreversible mutations.

How do I stop secret exposure and sensitive file access when using tool-using assistants?

Stop secret exposure and sensitive file access by applying input and output guardrails with secret scanning and protected-path detection to prevent protected-file access and credential leakage during agent workflows.

What is the best way to block risky tool actions before side effects occur?

The best way to block risky tool actions before side effects occur is implementing layered intent classification with blocking and advisory enforcement tiers to determine whether actions should be blocked, confirmed, warned, or logged.

Can I audit and log when an AI agent bypasses deployment gating protections?

Yes, you can audit and log bypasses by capturing evidence for blocks, bypasses, and escalations so deployment gating incidents and protected-operation events can be reconstructed and reviewed.

Does agent safety gating work for delegated agent or manager tool invocations?

Yes, agent safety gating works for delegated agent or manager tool invocations by applying guardrails to planning and execution workflows where tool calls and side effects may occur, reducing delegated mutation risk across all enforcement tiers.

When should I not rely on advisory enforcement tiers for tool guardrails?

Do not rely on advisory enforcement tiers for tool guardrails when handling irreversible system mutations, destructive git operations, or unbounded SQL patterns, as these require blocking enforcement tiers rather than warnings or logs to prevent damage.