Auto Harness
PacificStudio/openase
Diagnose and strengthen a repository's harness layer: AGENTS.md rules, knowledge layout, architecture boundaries, lint and type gates, API and generated-client contracts, test scaffolding…
Define deterministic guardrails for agent tool calls — protected paths, test-file locks during bug fixes, post-edit formatters, production approval gates, secret deny rules.
Install Common Agent Guardrails
$ npx skills add HoangNguyen0403/agent-skills-standard --skill common-agent-guardrails -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install HoangNguyen0403/agent-skills-standard common-agent-guardrails --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/HoangNguyen0403/agent-skills-standard.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/common/common-agent-guardrails .claude/skills/common-agent-guardrails && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "common-agent-guardrails" agent skill from https://github.com/HoangNguyen0403/agent-skills-standard/tree/develop/skills/common/common-agent-guardrails into .claude/skills/common-agent-guardrails/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "common-agent-guardrails", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/HoangNguyen0403/agent-skills-standard/tree/develop/skills/common/common-agent-guardrailsType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add HoangNguyen0403/agent-skills-standard --skill common-agent-guardrails -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install HoangNguyen0403/agent-skills-standard common-agent-guardrails --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/HoangNguyen0403/agent-skills-standard.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/common/common-agent-guardrails .agents/skills/common-agent-guardrails && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "common-agent-guardrails" agent skill from https://github.com/HoangNguyen0403/agent-skills-standard/tree/develop/skills/common/common-agent-guardrails into .agents/skills/common-agent-guardrails/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "common-agent-guardrails", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add HoangNguyen0403/agent-skills-standard --skill common-agent-guardrails -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install HoangNguyen0403/agent-skills-standard common-agent-guardrails --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/HoangNguyen0403/agent-skills-standard.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/common/common-agent-guardrails .cursor/skills/common-agent-guardrails && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "common-agent-guardrails" agent skill from https://github.com/HoangNguyen0403/agent-skills-standard/tree/develop/skills/common/common-agent-guardrails into .cursor/skills/common-agent-guardrails/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "common-agent-guardrails", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/HoangNguyen0403/agent-skills-standard.git --path skills/common/common-agent-guardrails--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add HoangNguyen0403/agent-skills-standard --skill common-agent-guardrails -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install HoangNguyen0403/agent-skills-standard common-agent-guardrails --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/HoangNguyen0403/agent-skills-standard.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/common/common-agent-guardrails .gemini/skills/common-agent-guardrails && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "common-agent-guardrails" agent skill from https://github.com/HoangNguyen0403/agent-skills-standard/tree/develop/skills/common/common-agent-guardrails into .gemini/skills/common-agent-guardrails/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "common-agent-guardrails", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install HoangNguyen0403/agent-skills-standard common-agent-guardrailsInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add HoangNguyen0403/agent-skills-standard --skill common-agent-guardrails -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/HoangNguyen0403/agent-skills-standard.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/common/common-agent-guardrails .github/skills/common-agent-guardrails && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "common-agent-guardrails" agent skill from https://github.com/HoangNguyen0403/agent-skills-standard/tree/develop/skills/common/common-agent-guardrails into .github/skills/common-agent-guardrails/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "common-agent-guardrails", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add HoangNguyen0403/agent-skills-standard --skill common-agent-guardrails -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install HoangNguyen0403/agent-skills-standard common-agent-guardrails --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/HoangNguyen0403/agent-skills-standard.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/common/common-agent-guardrails .opencode/skills/common-agent-guardrails && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "common-agent-guardrails" agent skill from https://github.com/HoangNguyen0403/agent-skills-standard/tree/develop/skills/common/common-agent-guardrails into .opencode/skills/common-agent-guardrails/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "common-agent-guardrails", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
common-agent-guardrails- GitHub stars
- 572
- Token cost
- ~1k tokens
- SKILL.md length
- 498 words
- Files
- 4 (incl. references)
- Skills in repo
- 211
- Repo updated
- First seen
- Licence
- MIT
At a glance
Define deterministic guardrails for agent tool calls — protected paths, test-file locks during bug fixes, post-edit formatters, production approval gates, secret deny rules.
- Works in 5 steps: What Belongs in a Guardrail → Required Guardrail Classes → Decision Semantics → …
- Reviewing a hook policy
- SKILL.md covers Priority: P1 (HIGH), 1. What Belongs in a Guardrail, 2. Required Guardrail Classes and 3. Decision Semantics, plus 6 more sections
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Common Agent Guardrails is an agent skill from HoangNguyen0403/agent-skills-standard. Define deterministic guardrails for agent tool calls — protected paths, test-file locks during bug fixes, post-edit formatters, production approval gates, secret deny rules. Use when writing or reviewing a hook policy, or moving an always-do-X rule out of prose into enforcement.
Its SKILL.md is about 1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 5 other files, including reference files (for example `evals/evals.json`, `references/guardrails-template.yaml` and `references/runtime-adapters.md`).
It sits in Development, covering LLM guardrails, Debugging and Linting and formatting. The repository describes itself as: A collection of Agent Skills Standard and Best Practice for Programming Languages, Frameworks that help our AI Agent follow best practies on frameworks and programming laguages. The licence is MIT.
When your agent uses it
- Reviewing a hook policy
- Moving an always-do-X rule out of prose into enforcement
Example prompts
- “/common-agent-guardrails”
Workflow steps
5 steps, taken from the step headings in SKILL.md.
What it can do on your machine
Read from SKILL.md and the folder at commit b529c2d. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Common Agent Guardrails loads about 1k tokens when it runs, and up to ~1.9k if it reads all its reference files. Until then it costs about 76 tokens; SKILL.md has 498 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check: notes
The automated check noted patterns worth knowing about, such as sudo or a known installer.
- NoteMentions a .env fileSKILL.md:38
| Secret deny | edit or read of `.env*`, `.ssh/`, `credentials*.json\|yaml`, identity files | block |
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from HoangNguyen0403/agent-skills-standard at commit b529c2d, republished under its MIT licence (© HoangNguyen0403). 498 words, ~1,030 tokens.
Download SKILL.mdSave it as
.claude/skills/common-agent-guardrails/SKILL.md (or your agent's skills folder). This skill also uses 3 other files; get the full folder from GitHub.- name
- common-agent-guardrails
- description
- Define deterministic guardrails for agent tool calls — protected paths, test-file locks during bug fixes, post-edit formatters, production approval gates, secret deny rules. Use when writing or reviewing a hook policy, or moving an always-do-X rule out of prose into enforcement.
Agent Guardrail Standard
Priority: P1 (HIGH)
A rule that must always hold belongs in a hook, not in a prompt. Prompts persuade; hooks decide.
1. What Belongs in a Guardrail
- Absolute compliance only: encode a rule here when a single violation is unacceptable, not when it is merely preferred.
- Deterministic check: the decision must be computable from tool name, arguments, and repo state — never from model judgment.
- Paired with a skill: the skill teaches the rule, the guardrail enforces it. Ship both or the rule decays.
2. Required Guardrail Classes
| Class | Trigger | Decision |
|---|---|---|
| Protected paths | edit to generated, vendored, or frozen files | block |
| Secret deny | edit or read of .env*, .ssh/, credentials*.json|yaml, identity files | block |
| Test lock | test-file edit while a bug-fix workflow is active | block |
| Formatter | after any accepted edit | run, then report |
| Production action | deploy, migration, or destructive command against production | ask named owner |
| Scope fence | writes outside the declared task scope | ask |
3. Decision Semantics
- Exit 0: allow, stay silent. Reserve stdout for the formatter class.
- Exit 2: block. Print the rule violated and the sanctioned alternative on stderr, never a generic denial.
- Any other exit: ask a human. Use it when the check is inconclusive, not as a soft block.
- Fail closed on production classes: if the guardrail cannot evaluate, treat production actions as blocked.
4. Test Lock During Bug Fixes
- Write the failing test first; the agent proves the bug reproduces before touching production code.
- Lock every test path for the duration of the fix so the proof cannot be weakened into passing.
- Unlock only when the fix is verified, or when the operator states the test itself is the defect.
Show full SKILL.md (222 more words)Show less
5. Placement and Ownership
- Team level: repository-tracked config, reviewed in pull requests like code.
- Organization level: managed settings the project cannot override; use for secret deny and production gates.
- Log every decision: timestamp, rule, tool, target, and outcome. An unlogged block is unauditable.
- Version the policy: a guardrail change is a control change and needs the same review as the control it enforces.
Anti-Patterns
- No prompt-only rules: If it must always hold, enforce it in a hook.
- No broad path globs: Name the protected directories, not the whole repo.
- No silent blocks: Print the rule and the allowed alternative.
- No agent self-approval: A human role authorizes production actions.
- No guardrail without a skill: Pair enforcement with the rule that explains it.
- No unlogged decisions: Record every block and ask.
Red Flags
- Stop if "just this once, disable the hook": Re-run with the sanctioned path or escalate to the policy owner.
- Stop if the fix edits the failing test: Restore the test and fix the production code.
- Stop if a production command runs with no named authorizer: Block and request sign-off.
References
Canonical response anchors
When this skill applies, preserve the following domain terminology or equivalent concrete examples in the answer when relevant:
- exit 2 blocks
- protected paths
- test lock
- approval gate
- fail closed
- log the block decision
© HoangNguyen0403, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 3 other files (references) in skills/common/common-agent-guardrails of HoangNguyen0403/agent-skills-standard.
- SKILL.md
- evals/evals.json
- references/guardrails-template.yaml
- references/runtime-adapters.md
Open the folder on GitHubat commit b529c2d
Compare with similar skills
Common Agent Guardrails next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Common Agent Guardrails this skillHoangNguyen0403/agent-skills-standard | 572 | — | ~1k | Automated safety check: Notes | MIT | |
| Auto HarnessPacificStudio/openase | 268 | — | ~1.2k | Automated safety check: Pass | Apache-2.0 | |
| Existing Repoalinaqi/maggy | 707 | — | ~4k | Automated safety check: Notes | MIT | |
| Figma Policy Guardrailsjeremylongshore/tons-of-skills-marketplace | 2.8k | — | ~2k | Automated safety check: Notes | MIT | |
| Adk Setupgoogle/adk-python | 22k | — | ~993 | Automated safety check: Notes | Apache-2.0 | |
| Vscode MCP Architecturetjx666/vscode-mcp | 105 | — | ~1.5k | Automated safety check: Pass | Custom licence |
Similar skills
Existing Repo
alinaqi/maggy
Analyze existing repositories, maintain structure, setup guardrails and best practices
Figma Policy Guardrails
jeremylongshore/tons-of-skills-marketplace
Enforce security policies and coding standards for Figma API integrations.
- Official
Adk Setup
google/adk-python
Sets up a local ADK Python development environment in a git clone of the open-source adk-python repository: a uv virtual environment, all dependency extras, pre-commit hooks, and a first unit-test…
Vscode MCP Architecture
tjx666/vscode-mcp
VSCode MCP Bridge project architecture — current monorepo layout, IPC/EventDispatcher flow, per-workspace socket discovery, MCP/CLI adapters, tool filtering, and VSCode extension services.
Specx Project Tooling
maksimzayats/specx
Add strict Python project tooling for a specx service. An agent skill from maksimzayats/specx.
More from HoangNguyen0403/agent-skills-standard
All 211 skills in this repoSubagent-Driven Development
HoangNguyen0403/agent-skills-standard
Runs a multi-task implementation plan by sending each task to a fresh implementer subagent, reviewing it independently, then reviewing the whole branch.
draw.io Architecture Diagramming
HoangNguyen0403/agent-skills-standard
Draws architecture diagrams as editable draw.io files from a JSON spec, with a fixed house style, one C4 level per diagram and evidence-tagged shapes.
Android Navigation 3 Guide
HoangNguyen0403/agent-skills-standard
Implements and migrates to Jetpack Navigation 3 in Compose: NavDisplay, typed route objects, a state-list back stack, deep links, multiple back stacks and dialog scenes.
Angular HttpClient Standards
HoangNguyen0403/agent-skills-standard
Sets rules for Angular HTTP code: functional interceptors, typed requests, services that own every call, and httpResource for reactive data loading in Angular 17+.
Angular Tooling
HoangNguyen0403/agent-skills-standard
Angular CLI usage, code generation, build configuration, and bundle optimization.
Common Code Review
HoangNguyen0403/agent-skills-standard
Conduct high-quality, persona-driven code reviews. An agent skill from HoangNguyen0403/agent-skills-standard.
Related
Categories
Questions about Common Agent Guardrails
What does Common Agent Guardrails do?
Define deterministic guardrails for agent tool calls — protected paths, test-file locks during bug fixes, post-edit formatters, production approval gates, secret deny rules. Common Agent Guardrails is an agent skill from HoangNguyen0403/agent-skills-standard. Define deterministic guardrails for agent tool calls — protected paths, test-file locks during bug fixes, post-edit formatters, production approval gates, secret deny rules.
When should I use Common Agent Guardrails?
Common Agent Guardrails fits situations like: reviewing a hook policy; moving an always-do-X rule out of prose into enforcement.
How do I install Common Agent Guardrails in Claude Code?
Run `npx skills add HoangNguyen0403/agent-skills-standard --skill common-agent-guardrails -a claude-code`. Or copy the skill folder (skills/common/common-agent-guardrails in HoangNguyen0403/agent-skills-standard) into .claude/skills/common-agent-guardrails in your project. Claude Code loads it when a task matches its description.
How do I install Common Agent Guardrails in Codex?
Run `npx skills add HoangNguyen0403/agent-skills-standard --skill common-agent-guardrails -a codex`. Or copy the skill folder (skills/common/common-agent-guardrails in HoangNguyen0403/agent-skills-standard) into .agents/skills/common-agent-guardrails in your project. Codex loads it when a task matches its description.
Can I use Common Agent Guardrails in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add HoangNguyen0403/agent-skills-standard --skill common-agent-guardrails -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/common-agent-guardrails, .gemini/skills/common-agent-guardrails, .github/skills/common-agent-guardrails and .opencode/skills/common-agent-guardrails in your project.
What does Common Agent Guardrails need to run?
SKILL.md names no scripts, command-line tools or credentials: Common Agent Guardrails is instructions for the agent only.
Does Common Agent Guardrails access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Common Agent Guardrails safe to install?
Our automated static check of SKILL.md found notes only (mentions a .env file), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.
What licence does Common Agent Guardrails use?
Common Agent Guardrails is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Common Agent Guardrails use?
About 1k tokens (SKILL.md is roughly 4.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 891 tokens, read only when the agent opens those files.
What are the alternatives to Common Agent Guardrails?
Skills that share tags, products or a category with Common Agent Guardrails: Auto Harness (PacificStudio/openase, 268 stars), Existing Repo (alinaqi/maggy, 707 stars), Figma Policy Guardrails (jeremylongshore/tons-of-skills-marketplace, 2.8k stars) and Adk Setup (google/adk-python, 22k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Common Agent Guardrails?
HoangNguyen0403 (a GitHub user) maintains it in HoangNguyen0403/agent-skills-standard, which has 572 GitHub stars. The repository holds 211 skills in this directory. The repository was last updated on October 9, 2026.
Source: HoangNguyen0403/agent-skills-standard on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.