From 2f63f3b3896b8455f12e0bc2d1dbe225259e48ee Mon Sep 17 00:00:00 2001 From: James Toole Date: Tue, 14 Jul 2026 10:02:38 -0400 Subject: [PATCH] Add SkillGate to Tools & Frameworks --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 9484a26..3b85977 100644 --- a/README.md +++ b/README.md @@ -364,6 +364,7 @@ AI agents increasingly use external tools, plugins, and skills to interact with | **[Skillid](https://github.com/dkoly/skillid)** | Policy-driven Claude Code plugin that combines skill guidance with per-tool hooks to enforce org guardrails, confirmation rules, redaction, and connector-specific access control | [![GitHub](https://img.shields.io/github/stars/dkoly/skillid)](https://github.com/dkoly/skillid) | | **[Agent Audit](https://arxiv.org/abs/2603.22853)** | Security analysis system for LLM agent apps: dataflow analysis, credential detection, MCP config parsing, privilege-risk checks | [Zhang et al.](https://arxiv.org/abs/2603.22853) | | **[mcp-sec-audit](https://arxiv.org/abs/2603.21641)** | MCP server security toolkit: static pattern matching + dynamic sandboxed fuzzing via Docker/eBPF for detecting over-privileged tool capabilities | [Huang et al.](https://arxiv.org/abs/2603.21641) | +| **[SkillGate](https://github.com/selfradiance/skillgate)** | Deterministic local CLI that statically inspects an agent Skill package before harness admission — reports instruction surface and execution surface without executing, installing, or trusting the Skill | [![GitHub](https://img.shields.io/github/stars/selfradiance/skillgate)](https://github.com/selfradiance/skillgate) | | **[Assay Harness](https://github.com/Rul1an/Assay-Harness)** | CI gate that checks an agent's claimed tool side-effects (filesystem, network, process) against independently observed runtime evidence, classifying each claim as supported, degraded, blocked, or not-evaluable (observed support is the ceiling) | [![GitHub](https://img.shields.io/github/stars/Rul1an/Assay-Harness)](https://github.com/Rul1an/Assay-Harness) | | **[Agent Scan](https://github.com/snyk/agent-scan)** | Snyk's scanner for local agent supply chains, covering MCP servers and skills with checks for prompt injection, tool poisoning, toxic flows, and malware-laced skill files | [![GitHub](https://img.shields.io/github/stars/snyk/agent-scan)](https://github.com/snyk/agent-scan) | | **[DScan](https://github.com/DeepScan-Security/dscan)** | Open-source agent security suite for runtime tool-call tracing, prompt-injection shielding, MCP audits, adversarial testing, and sequence-level attack detection | [![GitHub](https://img.shields.io/github/stars/DeepScan-Security/dscan)](https://github.com/DeepScan-Security/dscan) |