richfrem/agt-security
plugins/cli-agents/skills/agt-security/SKILL.md
Provides sandboxing validation, HMAC key rotation, and budget verification to manage security boundaries under Agentic Group Theory (AGT).
$ install --global
skillsauthnpx skillsauth add richfrem/agent-plugins-skills agt-securityInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 29, 2026, 5:49 AM330.4s2 files scanned
SKILL.md
- name:
- agt-security
- plugin:
- cli-agents
- description:
- >-
- allowed-tools:
- Bash, Read, Write
Agentic Group Theory (AGT) Security Control
This skill contains tools and reference materials to manage secure local execution sandboxes, verify process hygiene limits, and rotate cryptographic bus keys.
1. Sandbox Verification
To verify that the sub-agent execution environment complies with AGT process hygiene or containerized sandboxing:
python3 plugins/cli-agents/scripts/agt_ops.py verify-sandbox
This performs:
- Validating that high-risk environment variables (e.g.
ANTHROPIC_API_KEY,PYTHONPATH) are scrubbed inside subprocesses. - Confirming that allowed path boundaries throw exceptions on out-of-bounds access.
- Checking container status (if Docker/Podman isolation is active).
2. HMAC Key Rotation
To generate or rotate the HMAC symmetric key used to sign messages across the local control plane:
python3 plugins/cli-agents/scripts/agt_ops.py rotate-key
Keys are rotated dynamically and written to ${CLAUDE_PROJECT_DIR}/context/exploration/.secrets/session_hmac.key with restricted 0600 permissions.
Related Skills
richfrem/issue-worktree-agent
testing
VerifiedTrustedCommunity
Skill for creating and managing isolated git worktrees (`.worktrees/issue-NNN`) for issue execution branches. USE ONLY when setting up or cleaning up isolated git worktrees for specific issue execution. DO NOT USE for managing local task files (use `task-agent`) or escalating tasks to issues (use `github-issue-backlog-agent`).
4SKILL.mdUpdated Jul 29, 2026
richfrem/issue-pr-lifecycle-agent
data-ai
VerifiedTrustedCommunity
Skill for orchestrating the end-to-end GitHub issue lifecycle flow: Issue -> Worktree -> Implementation -> PR Creation -> Resolution Closure. USE ONLY when running or dry-running full lifecycle orchestration for resolving an issue with a PR. DO NOT USE for isolated worktree management only (use `issue-worktree-agent`) or logging issues (use `github-issue-agent`).
4SKILL.mdUpdated Jul 29, 2026
richfrem/github-issue-prioritizer
tools
VerifiedTrustedCommunity
Automatically ranks GitHub issues (P0-P3) based on friction tier, frequency, and blockages, synchronizing priority labels and GitHub Projects v2 custom fields.
4SKILL.mdUpdated Jul 29, 2026
richfrem/github-issue-backlog-agent
testing
VerifiedTrustedCommunity
Bridge skill for escalating ephemeral local task scratchpad items (`tasks/*.md`) into durable, taxonomy-validated, evidence-rich GitHub Issues. USE ONLY when promoting a single-session local task into durable repository backlog. DO NOT USE for managing local kanban boards (use `task-agent` instead) or directly querying/commenting on issues (use `github-issue-agent` instead).
4SKILL.mdUpdated Jul 29, 2026