policy plugins

by ArmorIQ

ArmorIQ intent-based security enforcement for Codex: Bash command guardrails with intent verification, optional CSRG cryptographic proofs, and audit logging. Codex hooks currently fire for Bash, apply_patch, and MCP tool calls; non-Bash file/web activity may need supplemental controls. See CODEX_HARNESS_LIMITATIONS.md.

by ArmorIQ

ArmorIQ intent-based security enforcement for Codex: Bash command guardrails with intent verification, optional CSRG cryptographic proofs, and audit logging. Codex hooks currently fire for Bash, apply_patch, and MCP tool calls; non-Bash file/web activity may need supplemental controls. See CODEX_HARNESS_LIMITATIONS.md.

by HashiCorp

Terraform Policy skills for authoring .policy.hcl files, writing .policytest.hcl tests, and converting Sentinel policies to Terraform Policy.

by Eduard Jiglau

Evidence-based assessment of whether an SAP API/interface usage scenario aligns with the SAP API Policy (v.4.2026a). Use whenever someone asks whether a way of calling SAP is allowed/compliant — e.g. Published API vs internal/private/"confidential" API status, "Documented Use", whether a third-party tool / iPaaS / middleware / RPA bot / AI agent / MCP server may call SAP APIs, agentic or generative-AI access to SAP, bulk data extraction or replication into a lake/warehouse, custom Z/Y OData or RFC/BAPI wrappers and Clean Core, ADT/developer-tooling boundaries, ODP-RFC and other "not permitted" interfaces, partner Integration Certification, or RISE integration remediation. Trigger even when the policy is not named, e.g. "are we allowed to…", "is it compliant to…", "can we connect X to SAP…", "will this break under the new API policy". Produces a sourced technical assessment with a confidence level — explicitly NOT legal advice and NOT a final SAP compliance decision.

by Mondoo, Inc.

cnspec agent skills for MQL development and policy navigation

by Mondoo, Inc.

MQL query development with syntax guidance, platform-specific patterns, and MCP tool integration

by Mondoo, Inc.

Navigate cnspec policy bundles using graph commands for LLMs

by Nizar Selander

TDD enforcement and guardrails for Claude Code, Codex, and GitHub Copilot CLI.

by antonygiomarxdev

Skill plus policy directory: role definitions and gate scripts that turn one AI session into a coordinator dispatching specialised workers through Orca

by DaveKJohn

One particular way of working, packaged so a repo can choose it: the branch-and-entry model, the tier ladder, the fold, the release cut and the gates that hold them, as skills plus their shared scripts. A workflow is not a team — it changes how the specialists work, not who they are — and the name says whose it is on purpose: DKJ's policy, the top rung of the order, not a baseline every consumer inherits. Deliberately NOT part of the core: a consuming repo is unique and has its own way of working, and the specialists adapt to it. Enable this only if you want THIS way of working. Requires the core team 'dkj-subagents-alpha', and a repo-side scripts/repo-config.ps1 + scripts/lib/branch-info.ps1.

by tamurayoshiya

Structured development workflows and engineering standards: portable skills (workflows + design/implementation/operation policies) for cross-agent development.

by XBert Intelligence

Weekly review of posted spend against policy XBerts on supported categories (out-of-policy account, banned vendor, missing receipt, duplicate transaction, receipt forensic flag).

by BOB Collective

Draft, review, activate, and use proof-checked trading policies through Pakt.

by 99x

Scan and auto-fix Android/iOS app store policy violations in React Native and Capacitor projects

by Girish Attri

Config-driven tmux workspace engine, fail-closed strict-v1 multi-agent harness, shared guard packs, and schema-v4 reviewed Git orchestration for Claude Code sessions.