Agent Guardrails
Git hooks and scanners that mechanically enforce agent coding rules
Test report
- Verdict
- Tested · Didn't pass
- Tested
- Jul 25, 2026
- Environment
- Claude Code 2.x (agent harness)
- Upstream re-checked
- Jul 30, 2026 · 8d8185f
⚠ This skill is no longer available upstream. Our re-check on Aug 10, 2026 couldn't find it any more (repo unreachable/deleted). The test below is what we measured on Jul 25, 2026 and we're leaving it up as a record — but there is nothing left to install, so we've removed the command.
Ran the bundled check-secrets.sh verbatim on a file holding three live-looking keys (an sk- OpenAI key, an AKIA AWS key, an xoxb- Slack token) and it printed 'Security scan passed' with exit 0 -- the headline secret-detection feature silently no-ops on stock macOS because every secret pattern uses grep -P, which BSD /usr/bin/grep (the grep a `bash script.sh` invocation resolves) does not support, so the error is swallowed by 2>/dev/null. The same broken grep -P sits in the pre-commit hook. Only the plain-grep checks work: it did catch a SQL-injection and a command-injection line plus a missing .gitignore. A no-skill read of the same file flags all three secrets instantly, so as shipped the marquee capability is worse than nothing -- it hands the user a false green light.
Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works
- Installs cleanly 5/5
- Triggers reliably 4/5
- Output vs. baseline 3/10
- Docs & honesty 2/5
What Agent Guardrails does
Installs git pre-commit hooks and shell scanners that mechanically block hardcoded secrets, code-bypass patterns, and SQL/command injection instead of relying on prompt rules. Triggers when you want to enforce standards on an AI agent's edits, add pre-commit enforcement, or scan a repo for leaked credentials.
How to install Agent Guardrails
Nothing to install: the source repository no longer has this skill. If the author brings it back, our daily re-check will pick it up and the command will reappear here.
Commands — how to trigger Agent Guardrails
-
/agent-guardrailsGit hooks and scanners that mechanically enforce agent coding rules
It also activates on plain-language prompts like these:
-
Add pre-commit hooks to block hardcoded secrets in this repo -
Scan my codebase for leaked API keys before I commit -
Enforce coding standards on the agent with git hook scanners
Frequently asked questions
- Is the Agent Guardrails skill free?
- Yes. The skill itself is free from jzOcb/agent-guardrails. SkillProof publishes the install command and an independent test verdict at no cost.
- Does Agent Guardrails work with Claude Code?
- We tested it with Claude Code 2.x (agent harness) on Jul 25, 2026. Verdict: Tested · Didn't pass. Ran the bundled check-secrets.sh verbatim on a file holding three live-looking keys (an sk- OpenAI key, an AKIA AWS key, an xoxb- Slack token) and it printed 'Security scan passed' with exit 0 -- the headline secret-detection feature silently no-ops on stock macOS because every secret pattern uses grep -P, which BSD /usr/bin/grep (the grep a `bash script.sh` invocation resolves) does not support, so the error is swallowed by 2>/dev/null. The same broken grep -P sits in the pre-commit hook. Only the plain-grep checks work: it did catch a SQL-injection and a command-injection line plus a missing .gitignore. A no-skill read of the same file flags all three secrets instantly, so as shipped the marquee capability is worse than nothing -- it hands the user a false green light.
- How do I install Agent Guardrails?
- Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
- Can I use Agent Guardrails with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
- The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.