Skip to content

v0.1.0

Latest

Choose a tag to compare

@whaojie797-design whaojie797-design released this 30 Jul 15:18

First release of skill-sentry.

  • Static, local, explainable pre-install audit for Agent Skills (never executes the scanned Skill, never uploads it)
  • 8 rule families: DEST / NET / SECRET / OBF / INJ / PERSIST / FS / DOMAIN
  • Three risk levels (INFO / REVIEW / HIGH) with conservative false-positive downgrades
  • CLI: python scripts/audit_skill.py ; outputs SKILL_AUDIT.md, skill-sbom.json, policy-result.json
  • 44 pytest cases across 36 fixtures; GitHub Actions on push/PR
  • MIT license