Audit skill manifest scopes against security baselines for minimal permissions.
npx skills add https://github.com/seifreed/skill-veil --skill scope-audit
Please help me install this Agent Skill. Skill: Scope Audit Source: https://github.com/seifreed/skill-veil/tree/main/benchmarks/fixtures/benign/scope-audit Command: npx skills add https://github.com/seifreed/skill-veil --skill scope-audit
This skill helps ensure that skills only request the minimum necessary permissions, preventing over-privileged access and enhancing security.
Use the scope audit skill to review the permissions declared in the 'data-reader' skill.
High-intent search queries and answers about installing and using this skill.
To audit skill permissions, analyze the declared scopes within the skill manifest files and compare them against predefined security baselines to verify they align with task intent. This prevents over-privileged access and enhances agent security.
Scope minimization is the process of ensuring skills only request the minimum necessary permissions required to perform their intended task. It prevents unnecessary write actions and shell access, enforcing security best practices.
Check for unnecessary write actions or shell access by inspecting the declared scopes in the skill configuration and enforcing policies that compare requested permissions against the actual needs of the task.
Yes, you need a skill manifest file to review declared scopes. The audit requires analysis of these manifest files to compare requested permissions against predefined security baselines and verify intent alignment.
Yes, you can verify intent alignment by comparing requested permissions against the actual needs of the task. Before deploying a skill that reads user data, you can ensure it is not also requesting write access or arbitrary command execution.
A basic scope audit is limited to analyzing declared scopes within skill manifest files and comparing them against predefined security baselines. It enforces policies against unnecessary write actions and shell access but does not perform deep behavioral analysis.
ConsiliencyParse specs to extract IDs, titles, and SHA-256 hashes into a JSON or TOON manifest.
LerianStudioAutomate infrastructure security audits with phased scanning and compliance mapping.
getaxonflowEnforce AxonFlow governance policies to block dangerous commands and detect PII in OpenClaw deployments.
gonzalezpazmonicaOrchestrate RBAC workflows for granting, revoking, auditing, and verifying user roles.
