Back to Skills

agent-governance

Patterns and techniques for adding governance, safety, and trust controls to AI agent systems. Use this skill when: - Building AI agents that call external tools (APIs, databases, file systems) - Implementing policy-based access controls for agent tool usage - Adding semantic intent classification to detect dangerous prompts - Creating trust scoring systems for multi-agent workflows - Building audit trails for agent actions and decisions - Enforcing rate limits, content filters, or tool restrict

30,445stars3,629forksUpdated 4/20/2026

Security Assessment

Low Risk(80/100)

Detected risks:

Privilege Escalation([SKILL.md] sudo)
Security Score80/100

About agent-governance

The agent-governance skill provides a structured framework for introducing governance, safety, and trust controls into AI agent systems. It addresses the challenges of managing autonomous agents that interact with external tools, process sensitive content, and operate in multi-agent workflows. By implementing this skill, developers can enforce policies that define allowable actions, detect potential threats in prompts, and maintain audit trails for all agent activities, ensuring accountability and compliance with organizational or regulatory standards.

Key features of this skill include the ability to define composable governance policies that control agent behavior, implement semantic intent classification to flag dangerous or inappropriate inputs, and establish trust scoring for interactions among multiple agents. It also supports rate limiting, content filtering, and tool-specific restrictions, along with audit logging to track every decision and action taken by the agents. Policies can be combined hierarchically, allowing for flexible configurations such as organization-wide, team-specific, and agent-level restrictions.

This skill is ideal for developers and teams deploying AI agents in production environments, especially when agents interact with APIs, databases, or perform sensitive operations such as financial transactions or infrastructure management. It is suitable for multi-agent systems where trust boundaries and compliance requirements are critical. Users seeking to ensure safe, auditable, and policy-compliant AI operations will benefit from applying this skill across various agent frameworks, including PydanticAI, CrewAI, OpenAI Agents, LangChain, and AutoGen.

FAQ

How do I apply governance policies to an AI agent?

Governance policies are defined using composable objects that specify allowed tools, blocked tools, content filters, rate limits, and tools requiring human approval. You apply them to agents to enforce these rules at runtime.

Which AI frameworks are compatible with this skill?

This skill can be used with any agent framework mentioned in the documentation, including PydanticAI, CrewAI, OpenAI Agents, LangChain, and AutoGen.

Can I combine multiple policies for a single agent?

Yes, the skill supports policy composition, allowing you to merge organization-wide, team-level, and agent-specific policies with most-restrictive-wins semantics.

Does this skill handle dangerous content automatically?

The skill provides semantic intent classification and content pattern matching to detect potential threats, but it may require human review for flagged content depending on policy settings.

Are there limitations on the types of tools or actions that can be controlled?

The policies can manage any tool or action defined in the system, but the skill relies on developers to specify which tools require blocking or human approval.

Install agent-governance

Download and extract the skill files to your .claude/skills/ directory.

Quick Setup:

  1. Copy the skill folder to .claude/skills/
  2. Claude will automatically detect and use the skill