The Agent Skills Directory

[SAFE]: The skill provides documentation on robust security controls for workflow execution. * Spend Management: Describes mechanisms for pre-execution cost checking and spend ceilings to prevent financial exhaustion. * Authorization Boundary: Implements a mandatory permits block that enforces a default-deny policy for hosts, paths, and tools. * Secret Protection: Outlines a system for environment-injected secrets that includes automatic masking and declared egress sinks to prevent data leakage. * Integrity and Accountability: Supports cryptographic workflow signing and verifiable execution traces with anchoring to public logs to prevent tampering. * Tool Pinning: Uses Trust On First Use (TOFU) to lock definitions for external tools, preventing unauthorized modifications to capabilities.

nika-operating