Run a Strix Governance Review (SGRF v1) on a system (/strix-governance:runtime-governance-review), a PR (/strix-governance:govern-pr), or a release (/strix-governance:release-readiness) — and wire a first governed, recorded action (/strix-governance:strix-wire). Self-host governed AI egress — a de-identifying proxy for OpenAI/Anthropic calls plus a local Claude Code prompt hook (/strix-governance:govern-ai-egress). Plugin skills are namespaced /strix-governance:<skill>. The three review lenses are advisory and run anywhere; strix-wire needs no account — Sandbox Mode auto-provisions a short-lived credential and Offline Mode makes no network calls.
Plugin strix-governance from marketplace strixgov in Strixgov/skills. Commands read from the repo's manifest — today.
execution-controlExplain AI execution control and assess (read-only) which actions in a project need governance. ASSESSMENT ONLY — it does not enforce anything. Use when the user asks "what is execution control", "which of my actions are risky", "what should Claude not be allowed to do", or wants a governance assess
strix-wireWire Strix governance into the current codebase. Scan for a consequential action, propose and apply one governed wrapper, run it only with explicit confirmation, and return an independently checkable signed proof when the receipt closes. Use when the user asks to wire Strix, scan for a risky action,
strix-verifyIndependently verify a Strix governance artifact — signed evidence records, approval artifacts, approval quorums, agent-swarm runs, tool-gateway receipts/chains, signed visuals, and CT inclusion/consistency proofs. Re-derives the canonical signed bytes and checks the Ed25519 signature against the pu
govern-ai-egressPut Strix Governed AI Egress in front of calls to an external AI provider, self-hosted. Runs the governed egress proxy (npx or container) inside your own boundary, points an OpenAI or Anthropic SDK at it, installs the local Claude Code prompt hook, and verifies the path with a synthetic request. Sta
govern-prRuns a Strix Governance Review (SGRF v1) on a pull request or diff — the change lens. Reviews whether the change adds or modifies a consequential action, touches the execution boundary / permissions / policy, opens or closes a bypass, or weakens any execution-control invariant, and reports whether i
release-readinessRuns a Strix Governance Review (SGRF v1) on a release or deploy candidate — the release lens. Reviews whether the release is governed end-to-end before it ships — is the deploy itself an evaluated/approved decision, what new consequential actions does it enable, is there a verifiable record of what
runtime-governance-reviewRuns a Strix Governance Review (SGRF v1) on a project, agent workflow, MCP server, or CI/CD pipeline — the system lens. Reviews whether consequential actions are evaluated before they execute, whether a third party can verify it, and how easily governance can be bypassed, producing the canonical 13-
Execution control for the agents you use every day. Scan a repository for consequential actions (payments, deletes, sends, migrations, AI tool use), wrap the risky ones with Strix governance, test that the wrap governs, and check your status: /strix-personal:strix-scan, :strix-plan, :strix-apply, :strix-test, :strix-status, and :strix-wire. Receipts verify independently with npx @strixgov/verifier. The plugin renders proof; it never determines it.
2 skills · 5 commands
Independently verify Strix governance artifacts — signed evidence, approvals, quorums, agent-swarm runs, tool-gateway receipts, and CT proofs. Run the namespaced skill /strix-verifier:strix-verify or the strix_verify MCP tool; Ed25519 + JWKS, offline-capable, no Strix account. The verdict is reproducible locally or fully offline.
1 skill · 1 command · 1 MCP server · hooks
Render a Strix Proof Room manifest into a self-verifying HTML page — live <strix-verify> embeds per record, claim binding (PROVEN/ROADMAP) enforced, no Strix account required.
1 command
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Security Engineer" editorial skill bundle for Claude Code.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.