skil-lock
Pin AI Skill behavior. Block unapproved drift in CI. See exactly what changed in every PR.
固定AI技能行为。在CI中阻止未经批准的漂移。精确查看每个PR中的变更。
How to install
git clone https://github.com/skills-lock/skil-lock ~/.claude/skills/skil-lock About
SkilLock **package-lock + Dependabot + PR security review - for your AI Skills.** An AI Skill is just a Markdown file your agent reads and acts on. Nothing stops one from quietly gaining a curl ... | bash or an .env read inside an innocent-looking docs PR - and in a 200-line diff, no human reviewer catches it. skil-lock pins the *capability surface* - the shell commands, network hosts, and file paths each Claude Code and Codex Skill can touch - into a committed skills.lock. On every PR, a GitHub Action posts a comment showing exactly what behavior changed, and blocks drift until a human approv…
Recommendation signals
Meta
- License
- Apache-2.0
- Language
- Go
- GitHub stars
- 7
- mo. downloads
- –
- Last push
- 2026-09-23
- Created
- 2026-05-13
Links
Basic safety check
- Findings
- curated 收录但无 npm 包/安装命令
- Sources
- curated:hesreallyhim/awesome-claude-code
- Topics
- agent-skills, ai, ai-agents, ai-skills, apache-2, claude-code, cli, codex, copilot, cursor-ai, developer-tools, github-action, golang, lockfile, security, skills
Related plugins
superpowers
obra/superpowers
An agentic skills framework & software development methodology that works.
dev-browser
SawyerHood/dev-browser
A Claude Skill to give your agent the ability to use a web browser
ruflo
ruvnet/claude-flow
🌊 The original agent harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and build conversational AI systems. Features adaptive memory, self-learning intelligence, federation, vector RAG integration, and native Claude Code / Codex / Hermes and many more Integrated