firetix/skill-bouncer
TSA for agent skills: scan SKILL.md files before install, deny overreach with readable receipts, and bundle the safe ones.
TSA for agent skills. Scan the skill before install, deny overreach with a readable receipt, then bundle the safe ones.
Skill Bouncer is an open-source Next.js app for reviewing third-party SKILL.md files before they reach an agent bundle. It parses the skill, infers implied capabilities, applies deterministic policy rules, shows an explainable ALLOW / REVIEW / DENY receipt, and lets you compose a bundle from the approved set.
Live demo: skill-bouncer.vercel.app
Additional screenshots:
Most agent ecosystems still treat skill installation as a trust problem. A skill can claim a narrow job while quietly asking for shell access, broad filesystem reads, or secret access. Skill Bouncer is intentionally narrower than a full runtime AI firewall: it is a fast intake gate for pre-install review.
That positioning matters:
research-10 dataset with curated allow/review/deny ground truthIncluded in v1:
SKILL.md intakeLoading reviews...