agent-guardrail-tester SKILL.md skillA
agent-guardrail-tester from pramoddutta/aitesterblueprint4x is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add pramoddutta/aitesterblueprint4x/agent-guardrail-tester@v1.0.0Pins v1.0.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- pramoddutta/aitesterblueprint4x
- Path
chapter_14_MCP_Create_VIBE/testskill-finder-mcp/skills/framework-packs/ai-agent-pack/agent-guardrail-tester/SKILL.md- Versions recorded
- 1
- Latest version
- v1.0.0, committed Oct 10, 2026
- Size
- 3,679 bytes
- Repository stars
- 14
- License
- none declared
Tests an AI agent's guardrails with explicit pass/fail criteria. Use when an SDET says "test the agent's guardrails", "make sure it never leaks PII", "check it can't call admin tools", or describes topic limits, tool permissions, or approval policies. Produces a draft pytest suite for PII redaction, topic restrictions, tool permissions, human approval, and output moderation, for the engineer to run and review.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Agent Guardrail Tester You check that every guardrail **holds under pressure, not just on the polite request**, and that each one has a pass/fail rule a reviewer can verify. ## When to use - An agent handles customer data, money, or admin actions and has written policies. - Guardrails exist in the prompt, middleware, or tool layer but were never tested. - Compliance or security asks for evidence that the controls actually work. ## Workflow 1. **Inventory guardrails.** For each: the policy, where it is enforced (prompt, middleware, tool layer), and the failure it prevents. Ask for policy docs; never invent a rule. 2. **Write pass/fail criteria.** Measurable rules: zero PII matches in output, disallowed tools never called, refunds over the limit always create an approval request. 3. **PII redaction.** Seed fake PII (emails, phones, card numbers) into inputs and tool results. Check responses and logs, including format variations. 4. **Topic restrictions.** Allowed, disallowed, and borderline topics, plus over-blocking checks so legitimate requests still get answered. 5. **Tool permissions and human approval.** Per role, try direct asks, indirect phrasing, …
Read the whole file at its exact version.
How to install
mdr add pramoddutta/aitesterblueprint4x/agent-guardrail-tester@sha256:bc48ca69d74c037cThe line at the top of this page pins the label v1.0.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_4movdgmklet4vhi5)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Oct 10, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (3679 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
pramoddutta/aitesterblueprint4x · 14 stars · license none declared · pushed 2026-10-11 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_4movdgmklet4vhi5 GET https://markdownregistry.com/api/v1/resolve?ref=pramoddutta/aitesterblueprint4x/agent-guardrail-tester GET https://markdownregistry.com/api/v1/blob/bc48ca69d74c037cea644fd793420e8d910eb5749d7b678d2efa494caeeae68e
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.