skill-guard 0.4.2

The quality gate for Agent Skills — validate, secure, conflict-detect, and test skills across their full lifecycle

skill-guard

The quality gate for Agent Skills.

skill-guard is a CLI tool that validates, secures, and governs Agent Skills across their full lifecycle — from contribution to production monitoring.

The Problem

Agent Skills are powerful. They're also ungoverned. As soon as more than one person contributes skills to a shared agent, things break in hard-to-diagnose ways:

• A new skill's description overlaps with an existing one → agent picks the wrong skill half the time
• Skills with dangerous scripts get merged because nobody reviewed the scripts/ directory
• Nobody knows what skills are installed, who owns them, or whether they still work
• A skill passes every test in isolation but fails when the real agent uses it with 25 other skills loaded

skill-guard is the quality gate that catches these problems before they reach production.

What It Does

ONBOARDING (pre-merge, in CI):
  skill-guard validate   → format compliance + quality scoring
  skill-guard secure     → scan for dangerous patterns  
  skill-guard conflict   → detect trigger overlap with existing skills
  skill-guard test       → inject into staging agent, run evals
  skill-guard check      → run all four as a single gate

ONGOING (post-merge, scheduled):
  skill-guard monitor    → re-run evals, detect drift, manage lifecycle
  skill-guard catalog    → searchable registry of approved skills

Quick Start

pip install agentskill-guard

# Initialize in your skills repo
skill-guard init

# Validate a skill
skill-guard validate ./skills/my-skill/

# Check for security issues
skill-guard secure ./skills/my-skill/

# Check for conflicts with existing skills
skill-guard conflict ./skills/my-skill/ --against ./skills/

# Run the full gate (validate + secure + conflict)
skill-guard check ./skills/my-skill/ --against ./skills/

Installation

# Core (static analysis — no agent required)
pip install agentskill-guard

# With embedding-based conflict detection
pip install agentskill-guard[embeddings]

Requires Python 3.11+.

Documentation

• Getting Started
• End-to-End Integration Guide ← start here for real agent setup
• Writing Evals
• Hook Scripts
• CI/CD Integration
• Configuration Reference

What skill-guard Does NOT Do

• Does not replace Anthropic's skill-creator for writing skills
• Does not host or serve skills — skills live in your repo
• Does not modify skills — it reports issues, authors fix them
• Does not require a database or server — the catalog is a YAML file in your repo

Contributing

See CONTRIBUTING.md. We welcome contributions of all kinds.

License

Apache 2.0. See LICENSE.