agent-runtime-guard
Control what an AI agent and its MCP servers may do while they run - a PreToolUse policy (denied commands, protected paths, approved hosts, approved MCP servers and tools, no credentials in arguments), a redacted log of every tool call, and a session audit that finds denied calls, loops and bursts.
When to use
Use when the user asks to "lock down what the agent can do", "block dangerous commands", "control MCP tool calls", "audit what the agent did", "stop the agent from touching production", or deploys Navin, a subagent or an MCP server where a wrong call has a real cost. In French "encadrer les actions de l'agent", "bloquer les commandes dangereuses", "auditer les appels d'outils", "controler les serveurs MCP".
Inputs and tools
The skill takes the request of the user in natural language: its frontmatter declares no argument. It declares no allowed-tools: the tools available are those of the agent that loads it, under the tool policy of the project.
Reference
| Field | Value |
|---|---|
| Name | agent-runtime-guard |
| Category | Security |
| Version | Not declared |
| Licence | Not declared |
| Allowed tools | Not declared |
| Plugins | - |
| Source | catalog/navin/skills/agent-runtime-guard/SKILL.md |
| Digest | sha256:cc8d87cc2e02401283411b3299da965ccd026c45ebf93c64557b351e51d8c5a4 |
skill_md_digest | sha256:b857f00e89fd1eb3153ef17245e0d451bff37f06c92e78700e07a69871621a24 |
| Emoji | 🛡️ |
Bundled files
| Path | Count |
|---|---|
catalog/navin/skills/agent-runtime-guard/assets | 1 |
catalog/navin/skills/agent-runtime-guard/examples | 5 |
catalog/navin/skills/agent-runtime-guard/references | 3 |
catalog/navin/skills/agent-runtime-guard/scripts | 2 |
Frontmatter
Every field of the SKILL.md frontmatter, with the value of the source:
| Field | Value |
|---|---|
name | agent-runtime-guard |
description | Control what an AI agent and its MCP servers may do while they run - a PreToolUse policy (denied commands, protected paths, approved hosts, approved MCP servers and tools, no credentials in arguments), a redacted log of every tool call, and a session audit that finds denied calls, loops and bursts. Use when the user asks to "lock down what the agent can do", "block dangerous commands", "control MCP tool calls", "audit what the agent did", "stop the agent from touching production", or deploys Navin, a subagent or an MCP server where a wrong call has a real cost. In French "encadrer les actions de l'agent", "bloquer les commandes dangereuses", "auditer les appels d'outils", "controler les serveurs MCP". |
metadata.navin.emoji | 🛡️ |
metadata.navin.category | security |