Skill Risk Check

Use this skill when the user asks whether an agent skill or plugin should be trusted, installed, reviewed, or admitted.

Non-negotiable boundary

Scanning is read-only. Never execute, source, import, install, or enable the target artifact during review. A clean report is not proof that an artifact is safe, and a finding is not proof of malicious intent.

Workflow

1. Identify the exact local target and its provenance.
2. Run python <catalog-root>/agent-skillguard/scripts/skillguard.py scan <path> --format markdown before any installation step. Use the absolute catalog path when the host does not expand <catalog-root>.
3. Review every active finding at its exact file and line.
4. Separate confirmed behavior, ambiguous behavior, and false positives.
5. If a false positive is accepted, suppress only its exact fingerprint, rule ID, and rule version with a concrete reason.
6. Re-run the scan and report both active and suppressed counts.
7. Stop before installation or permission grants unless the user separately authorized them.
8. When evaluating the scanner itself, scan agent-skillguard/fixtures/positive (expected review findings) and agent-skillguard/fixtures/negative (expected clean result) with the bundled script, and inspect rules/non-coverage.json. The installed plugin package does not ship the upstream tools/verify_rule_corpus.py helper, so do not claim that helper ran; the two fixture scans are the supported local smoke test.

Packaging Notes