2
    skill-install-safety-gate

    skill-install-safety-gate

    by Roy Yuen

    Automated security and compatibility firewall for installing AI agent skills and Codex/OpenClaw packages.

    Updated Apr 2026
    0 installs

    Free

    One-time purchase · Own forever

    ⚡ Also available via Agensi MCP — your AI agent can load this skill on demand via MCP. Learn more →

    Included in download

    • Downloadable skill package
    • 3 permissions declared
    • Instant install

    See it in action

    GATE DECISION: allow
SUMMARY: Validated 'web-scraper' v1.2.0.
COMPATIBILITY: All bins (python3) found.
SECURITY: 0 blockers, 2 review items (network URLs detected).
INSTALL: Successfully copied to ~/.codex/skills/web-scraper.
Receipt generated: install-receipt.json

    Screenshots

    About This Skill

    Protect Your AI Agent Environment

    Deploying third-party skills and toolsets into your agent's runtime shouldn't be a leap of faith. The Skill Install Safety Gate provides a rigorous, automated inspection layer designed specifically for Codex and OpenClaw-style skill architectures. It acts as a static analysis firewall, ensuring that new capabilities meet your security and compatibility standards before they ever touch your file system.

    What it does

    • Structural Validation: Verifies package shape, ZIP integrity, and mandatory SKILL.md metadata.
    • Compatibility Mapping: Automatically checks for required binaries (anyBins), environment variables, and config dependencies against your local host.
    • Heuristic Security Scanning: Detects suspicious patterns such as ZIP path traversals, obfuscated payloads, prompt-injection risk, and dangerous dynamic code execution patterns.
    • Conflict Prevention: Prevents accidental overwrites by checking for existing skill slugs in the target directory.

    Why developer-agents need this

    Unlike simple prompting, this skill provides a programmatic "Pass/Fail" mechanism. It generates structured JSON and CSV reports, allowing your agent or CI/CD pipeline to make informed, data-driven decisions about software installation. It never executes untrusted code, ensuring the audit process itself is perfectly safe.

    Output & Integration

    The skill produces a detailed install-safety-report.md for human review and a machine-readable output.json. If the --install-on-pass flag is used, it will only commit the files to your target directory if the gate decision is a clean "allow" with zero blockers or review items.

    📖 Learn more: Best DevOps & Deployment Skills for Claude Code →

    Use Cases

    • Verify third-party skill compatibility with local binaries and env vars
    • Detect malicious code patterns and path traversals in skill ZIPs
    • Automate the safe onboarding of new agent tools in CI/CD pipelines
    • Generate detailed security findings and compatibility reports in JSON/CSV

    Reviews

    No reviews yet — be the first to share your experience.

    Only users who have downloaded or purchased this skill can leave a review.

    Security Scanned

    Passed automated security review

    Permissions

    Terminal / Shell
    Network Access
    Environment Variables

    File Scopes

    skill-install-safety-gate/**

    Tags

    security-audit
    devops
    static-analysis
    automation
    package-manager

    Creator

    Roy Yuen

    Frequently Asked Questions

    Learn More About AI Agent Skills

    Similar Skills

    git-commit-writer

    Writes conventional commit messages by analyzing your staged git changes. Detects commit type, scope, and breaking changes automatically.

    Free70 installs

    env-doctor

    Diagnoses why your project will not start. Checks runtime versions, dependencies, environment variables, databases, ports, and build artifacts systematically.

    Free39 installs

    code-reviewer

    Reviews your code for bugs, security vulnerabilities, logic errors, performance issues, and style violations. Organizes findings by severity and suggests fixes with code examples.

    Free140 installs

    readme-generator

    Generates a complete, polished README.md by scanning your actual project structure, dependencies, and code.

    Free52 installs

    Free