review-quarantine

Review Sigil quarantined items and approve or reject them via CLI.

5|2|Updated Feb 15, 2026
One-click install
npx skills add https://github.com/NOMARJ/sigil --skill review-quarantine
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review-quarantine
Source: https://github.com/NOMARJ/sigil/tree/main/plugins/claude-code/skills/review-quarantine
Command: npx skills add https://github.com/NOMARJ/sigil --skill review-quarantine

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides clear, actionable guidance for triaging items placed in the Sigil quarantine so reviewers can safely decide whether to approve or permanently reject potentially malicious or suspicious code before it enters the working environment.

Core Features & Use Cases

  • List and Inspect: Use the Sigil CLI to enumerate quarantined artifacts and view detailed scan findings for each item.
  • Threat Explanation & Risk Levels: Translate scan labels (CLEAN, LOW, MEDIUM, HIGH, CRITICAL) into plain-language security implications and recommended actions.
  • Decision Guidance: Recommend approval, approval with caution, or rejection and explain likely false positives and remediation steps.
  • Use Case: A developer receives a quarantined repository pulled from an external source; use this Skill to review detected network or exec patterns, assess risk, and either approve the package for local use or reject it.

Quick Start

Run the Sigil CLI to list quarantined items, review the findings for a selected item, and then approve or reject it based on the provided risk guidance.

Frequently Asked Questions about review-quarantine

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review and approve quarantined code from external repositories?

To review quarantined code, use the Sigil CLI to list quarantined artifacts, inspect detailed scan findings, evaluate threat explanations, and execute approve or reject actions based on risk levels.

What do quarantine scan risk levels like HIGH and CRITICAL mean for my code review?

Quarantine scan risk levels translate scan labels (CLEAN, LOW, MEDIUM, HIGH, CRITICAL) into plain-language security implications and recommended actions to help you decide on approval, caution, or rejection.

How can I tell if a quarantined package contains a false positive security threat?

Review the scan findings for network or exec patterns in the quarantined package; the Skill provides decision guidance that explains likely false positives and recommends remediation steps before you approve or reject.

Can I use this code review Skill to triage scanned agent skills and packages?

Yes, this Skill applies to Sigil quarantine workflows for scanned repositories, packages, and agent skills where scan results are available and require triage before entering your working environment.

When should I reject a quarantined item instead of approving it with caution?

Reject a quarantined item when the scan findings display HIGH or CRITICAL threat levels with plain-language security implications indicating potentially malicious code rather than a likely false positive.