modeio-guardrail

Category: Tools & Productivity | Uploader: mode-io | Downloads: 0 | Version: v1.0（Latest）

Changelog: Source: GitHub https://github.com/mode-io/mode-io-skills

Directory Structure

Current level: modeio-guardrail/

📁 modeio_guardrail/
- 📁 cli/
  - 📄 __init__.py 44 B
  - 📄 safety.py 8.1 KB
- 📄 __init__.py 32 B
📁 scripts/
- 📄 safety.py 367 B
📁 tests/
- 📄 test_safety_contract.py 11.4 KB
📄 ARCHITECTURE.md 795 B
📄 SKILL.md 3.4 KB

SKILL.md

---
name: modeio-guardrail
description: >-
  Runs real-time safety analysis for instructions that may trigger tool
  execution, external calls, file edits, permission changes, destructive or
  irreversible actions, prompt injection, or compliance-sensitive operations.
  Use before executing instructions with side effects; skip pure read-only
  chat, planning, or pre-install repository auditing.
---

# Run live instruction safety checks

Use this skill to gate instructions that may trigger tools or state changes behind a backend-backed safety decision before execution.

This skill is for live instruction and operation safety only. For pre-install repository auditing, use `modeio-skill-audit`.

## Tool routing

1. Use `scripts/safety.py` for instruction and operation safety checks.
2. Run the check before executing any instruction that may trigger tool use, external calls, file edits, permission changes, or other state changes.
3. For state-changing work, provide both `--context` and `--target`.
4. If the safety check cannot be completed, treat the operation as unverified.

## Dependencies

- `requests` is required for `scripts/safety.py`.
- For repo-local setup from the repo root:

```bash
python scripts/bootstrap_env.py
python scripts/doctor_env.py
```

## Context contract

Pass `--context` as JSON with these keys:

```json
{
  "environment": "local-dev|ci|staging|production|unknown",
  "operation_intent": "read-only|cleanup|maintenance|migration|permission-change|destructive|unknown",
  "scope": "single-resource|bounded-batch|broad|unknown",
  "data_sensitivity": "public|internal|sensitive|regulated|unknown",
  "rollback": "easy|partial|none|unknown",
  "change_control": "ticket:<id>|approved-manual|none|unknown"
}
```

`--target` must be a concrete resource identifier such as an absolute path, table name, service name, or URL.

## Script

### `scripts/safety.py`

```bash
python scripts/safety.py -i "Delete /tmp/cache/build-123.log" \
  -c '{"environment":"local-dev","operation_intent":"cleanup","scope":"single-resource","data_sensitivity":"internal","rollback":"easy","change_control":"none"}' \
  -t "/tmp/cache/build-123.log" --json

python scripts/safety.py -i "DROP TABLE users" \
  -c '{"environment":"production","operation_intent":"destructive","scope":"broad","data_sensitivity":"regulated","rollback":"none","change_control":"ticket:DB-9021"}' \
  -t "postgres://prod/maindb.users" --json
```

## Action policy

| `approved` | `risk_level` | Agent action |
|---|---|---|
| `true` | `low` | Proceed. |
| `true` | `medium` | Proceed and mention the risk. |
| `false` | `medium` | Require explicit confirmation before proceeding. |
| `false` | `high` | Block by default and require explicit override. |
| `false` | `critical` | Block and require explicit acknowledgement before any override. |

If the check fails with network/API/dependency issues, do not silently proceed.

## When not to use

- Pre-install or repository-level inspection that should happen before any execution attempt
- Pure planning, summarization, or clearly read-only analysis with no tool call or state-change path
- Data transformation tasks that need to rewrite or mask content rather than score runtime safety
- Local routing or middleware scenarios where you need to sit in front of upstream model traffic

## Resources

- `scripts/safety.py` — live safety check entry point
- `ARCHITECTURE.md` — command-safety package boundaries

Comments 0

Latest | Hot

Please login before commenting.

No comments yet. Be the first one!

modeio-guardrail

Directory Structure

SKILL.md

Report

Notice