guardrails SKILL.md skillA

guardrails from alelaguard/agentguards-plugins is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add alelaguard/agentguards-plugins/guardrails@git:20260924.03eda53

Pins git:20260924.03eda53 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
alelaguard/agentguards-plugins
Path
claude/skills/guardrails/SKILL.md
Versions recorded
2
Latest version
git:20260924.03eda53, committed Sep 24, 2026
First version recorded
Jun 30, 2026
Size
1,638 bytes
Repository stars
4
License
MIT

How AgentGuards enforces its guardrails in Claude Code — fully automatic, via hooks, with nothing for you to call. Load this if asked how AgentGuards works, whether you need to screen something yourself, or why no agentguards check_input / authorize_action tools are available.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# AgentGuards — enforced by hooks

This plugin has no MCP server, so there is no `check_input`, `authorize_action`
or `health_check` tool — do not `ToolSearch` for them, they are not installed.

That is not reduced protection. The hooks in `hooks/hooks.json` enforce
deterministically, on every request, whatever the model does:

- **`UserPromptSubmit`** screens every prompt before you see it. A blocked prompt
  never reaches you.
- **`PreToolUse`** authorizes every `Bash` command before it runs: denied, allowed,
  or put to the user for approval.
- **`PostToolUse`** scans content from `WebFetch`, `WebSearch`, and any `Bash`
  command that fetches (`curl`, `wget`, `http`, `fetch`, `aria2c` — also behind
  `sudo`, `timeout`, `bash -c`, `$(...)`), redacting or withholding it before you
  read it. `Write`, `Edit` and `MultiEdit` are scanned for vulnerabilities and
  secrets.

Nothing here requires you to call a tool, check a decision, or format a block
message — the hook has already acted by the time you see (or don't see) the
result. If a hook blocks something, its message appears as the tool result or
the reason a prompt was rejected; reply with that message rather than composing
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add alelaguard/agentguards-plugins/guardrails@sha256:4661ef47f591f1ae

The line at the top of this page pins the label git:20260924.03eda53, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_7ssqrk7e6lhf5ve3.svg)](https://markdownregistry.com/a/art_7ssqrk7e6lhf5ve3)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 2 versions of this file, between Jun 30, 2026 and Sep 24, 2026, about one every 86 days. Its first recorded version is graded B and its latest A.

versioncommittedcommitsizeaudit
git:20260924.03eda53 latest2026-09-24 03eda53 1,638 BA view · diff
git:20260630.7dbee1d2026-06-30 7dbee1d 4,910 BB view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (1638 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

alelaguard/agentguards-plugins · 4 stars · license MIT · pushed 2026-10-17 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_7ssqrk7e6lhf5ve3
GET https://markdownregistry.com/api/v1/resolve?ref=alelaguard/agentguards-plugins/guardrails
GET https://markdownregistry.com/api/v1/blob/4661ef47f591f1ae668b42e9e9a7276fc2340555ceb21e13b11c5622c38702b4

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from alelaguard/agentguards-plugins

guardrails SKILL.md skill
alelaguard/agentguards-plugins · claude-directory/skills/guardrails/SKILL.md · How AgentGuards enforces its guardrails in Claude Code — fully automatic, via hooks, with nothing for you to call. Load…
git:20261017.b6d5d99 · audit A · 4 stars
setup SKILL.md skill
alelaguard/agentguards-plugins · claude-directory/skills/setup/SKILL.md · Set up and verify AgentGuards in Claude Code. Use when the user runs /agentguards:setup, asks to configure AgentGuards…
git:20261017.b6d5d99 · audit A · 4 stars
status SKILL.md skill
alelaguard/agentguards-plugins · claude-directory/skills/status/SKILL.md · Report AgentGuards guardrail status. Use when the user runs /agentguards:status or asks whether AgentGuards is active…
git:20261017.b6d5d99 · audit A · 4 stars
guardrails SKILL.md skill
alelaguard/agentguards-plugins · claude-selfhosted/skills/guardrails/SKILL.md · AgentGuards security guardrails for a self-hosted appliance — explains that enforcement is fully automatic via hooks…
git:20260804.4143397 · audit B · 4 stars
setup SKILL.md skill
alelaguard/agentguards-plugins · claude-selfhosted/skills/setup/SKILL.md · Set up and verify AgentGuards in Claude Code against a self-hosted appliance. Use when the user runs…
git:20260811.9c2c95a · audit B · 4 stars
status SKILL.md skill
alelaguard/agentguards-plugins · claude-selfhosted/skills/status/SKILL.md · Report AgentGuards guardrail status for a self-hosted appliance. Use when the user runs /agentguards:status or asks…
git:20260804.4143397 · audit B · 4 stars
setup SKILL.md skill
alelaguard/agentguards-plugins · claude/skills/setup/SKILL.md · Set up and verify AgentGuards in Claude Code. Use when the user runs /agentguards:setup, asks to configure AgentGuards…
git:20260924.03eda53 · audit A · 4 stars
status SKILL.md skill
alelaguard/agentguards-plugins · claude/skills/status/SKILL.md · Report AgentGuards guardrail status. Use when the user runs /agentguards:status or asks whether AgentGuards is active…
git:20260924.03eda53 · audit A · 4 stars
guardrails SKILL.md skill
alelaguard/agentguards-plugins · codex-selfhosted/skills/guardrails/SKILL.md · AgentGuards security guardrails for a self-hosted appliance — explains that enforcement is fully automatic via hooks…
git:20260804.c8a22f2 · audit A · 4 stars
setup SKILL.md skill
alelaguard/agentguards-plugins · codex-selfhosted/skills/setup/SKILL.md · Set up and verify AgentGuards in Codex against a self-hosted appliance. Use when the user asks to configure…
git:20260811.9c2c95a · audit A · 4 stars
status SKILL.md skill
alelaguard/agentguards-plugins · codex-selfhosted/skills/status/SKILL.md · Report AgentGuards guardrail status for a self-hosted appliance. Use when the user asks whether AgentGuards is active…
git:20260804.c8a22f2 · audit A · 4 stars
guardrails SKILL.md skill
alelaguard/agentguards-plugins · codex/skills/guardrails/SKILL.md · How AgentGuards enforces its guardrails in Codex — fully automatic, via hooks, with nothing for you to call. Load this…
git:20260928.73c65f9 · audit A · 4 stars

Every file in alelaguard/agentguards-plugins

Other files named guardrails

guardrails SKILL.md skill
ai-analyst-lab/ai-analyst · .claude/skills/guardrails/SKILL.md · Ensure every success metric is paired with guardrail metrics and check for trade-offs before presenting improvements as…
git:20260827.7ff2e25 · audit A · 314 stars
guardrails SKILL.md skill
fusengine/agents · plugins/prompt-engineer/skills/guardrails/SKILL.md · Use when implementing input/output guardrails, writing ethical guardrail templates, or auditing an agent/prompt for…
git:20260729.3b91eed · audit A · 33 stars
guardrails SKILL.md skill
alelaguard/agentguards-plugins · codex/skills/guardrails/SKILL.md · How AgentGuards enforces its guardrails in Codex — fully automatic, via hooks, with nothing for you to call. Load this…
git:20260928.73c65f9 · audit A · 4 stars
guardrails SKILL.md skill
alelaguard/agentguards-plugins · codex-selfhosted/skills/guardrails/SKILL.md · AgentGuards security guardrails for a self-hosted appliance — explains that enforcement is fully automatic via hooks…
git:20260804.c8a22f2 · audit A · 4 stars
guardrails SKILL.md skill
alelaguard/agentguards-plugins · gemini-selfhosted/skills/guardrails/SKILL.md · AgentGuards security guardrails for a self-hosted appliance — explains that enforcement is fully automatic via hooks…
git:20260804.c8a22f2 · audit A · 4 stars
guardrails SKILL.md skill
alelaguard/agentguards-plugins · opencode/skills/guardrails/SKILL.md · AgentGuards security guardrails — the mandatory input-screening, web-content, and destructive-command checking…
git:20260713.7345168 · audit B · 4 stars
guardrails SKILL.md skill
alelaguard/agentguards-plugins · gemini/skills/guardrails/SKILL.md · AgentGuards security guardrails — the mandatory input-screening, web-content, and destructive-command checking…
git:20261006.fcf182e · audit A · 4 stars
guardrails SKILL.md skill
alelaguard/agentguards-plugins · claude-selfhosted/skills/guardrails/SKILL.md · AgentGuards security guardrails for a self-hosted appliance — explains that enforcement is fully automatic via hooks…
git:20260804.4143397 · audit B · 4 stars

Browse by kind, by grade A, or by owner.