Skip to content

Add SkillGate to Tools & Frameworks #32

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
selfradiance wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add SkillGate to Tools & Frameworks #32

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -364,6 +364,7 @@ AI agents increasingly use external tools, plugins, and skills to interact with
| **[Skillid](https://github.com/dkoly/skillid)** | Policy-driven Claude Code plugin that combines skill guidance with per-tool hooks to enforce org guardrails, confirmation rules, redaction, and connector-specific access control | [![GitHub](https://img.shields.io/github/stars/dkoly/skillid)](https://github.com/dkoly/skillid) |
| **[Agent Audit](https://arxiv.org/abs/2603.22853)** | Security analysis system for LLM agent apps: dataflow analysis, credential detection, MCP config parsing, privilege-risk checks | [Zhang et al.](https://arxiv.org/abs/2603.22853) |
| **[mcp-sec-audit](https://arxiv.org/abs/2603.21641)** | MCP server security toolkit: static pattern matching + dynamic sandboxed fuzzing via Docker/eBPF for detecting over-privileged tool capabilities | [Huang et al.](https://arxiv.org/abs/2603.21641) |
| **[SkillGate](https://github.com/selfradiance/skillgate)** | Deterministic local CLI that statically inspects an agent Skill package before harness admission — reports instruction surface and execution surface without executing, installing, or trusting the Skill | [![GitHub](https://img.shields.io/github/stars/selfradiance/skillgate)](https://github.com/selfradiance/skillgate) |
| **[Assay Harness](https://github.com/Rul1an/Assay-Harness)** | CI gate that checks an agent's claimed tool side-effects (filesystem, network, process) against independently observed runtime evidence, classifying each claim as supported, degraded, blocked, or not-evaluable (observed support is the ceiling) | [![GitHub](https://img.shields.io/github/stars/Rul1an/Assay-Harness)](https://github.com/Rul1an/Assay-Harness) |
| **[Agent Scan](https://github.com/snyk/agent-scan)** | Snyk's scanner for local agent supply chains, covering MCP servers and skills with checks for prompt injection, tool poisoning, toxic flows, and malware-laced skill files | [![GitHub](https://img.shields.io/github/stars/snyk/agent-scan)](https://github.com/snyk/agent-scan) |
| **[DScan](https://github.com/DeepScan-Security/dscan)** | Open-source agent security suite for runtime tool-call tracing, prompt-injection shielding, MCP audits, adversarial testing, and sequence-level attack detection | [![GitHub](https://img.shields.io/github/stars/DeepScan-Security/dscan)](https://github.com/DeepScan-Security/dscan) |
Expand Down