Personal pre-merge security gate for agent tooling - skills, subagents, slash commands, hooks, shell/sync scripts, dotfiles, settings.json, and plugin/MCP trust. Also scans for user-specific absolute paths, device/vault overfitting, and hardcoded personal constants (names, emails, handles, personal repo URLs, vault/project names) in shared tooling - anything the agent should instead infer at runtime or ask for live - and can fix them (prefer ~/ on macOS). Scans any file an agent reads as instructions for text hidden from the human reviewer - invisible Unicode, ASCII/tag smuggling, zero-width characters, bidi overrides - so use it whenever asked whether a skill, prompt, rules file, or pasted content has hidden or invisible instructions in it. MUST be used before committing or merging any change to ~/.agents or ~/.claude, before keeping or enabling a new or changed hook (PreToolUse/PostToolUse/SessionStart in settings.json - "review this hook", "check my hook before I keep it"), before installing or trusting a plugin or MCP server, and for any automation that runs commands, touches files, or consumes untrusted agent/LLM/web/MCP output - apply this checklist rather than reviewing ad hoc.
Install with
Claude CodeCodexCursorGitHub CopilotGemini CLI
Supported by the Atlas install prompt. Skill-specific requirements vary.
Skill stats
Skills1CategorySecurityStars0
About this skill
Personal pre-merge security gate for agent tooling - skills, subagents, slash commands, hooks, shell/sync scripts, dotfiles, settings.json, and plugin/MCP trust. Also scans for user-specific absolute paths, device/vault overfitting, and hardcoded personal constants (names, emails, handles, personal repo URLs, vault/project names) in shared tooling - anything the agent should instead infer at runtime or ask for live - and can fix them (prefer ~/ on macOS). Scans any file an agent reads as instructions for text hidden from the human reviewer - invisible Unicode, ASCII/tag smuggling, zero-width characters, bidi overrides - so use it whenever asked whether a skill, prompt, rules file, or pasted content has hidden or invisible instructions in it. MUST be used before committing or merging any change to ~/.agents or ~/.claude, before keeping or enabling a new or changed hook (PreToolUse/PostToolUse/SessionStart in settings.json - "review this hook", "check my hook before I keep it"), before installing or trusting a plugin or MCP server, and for any automation that runs commands, touches files, or consumes untrusted agent/LLM/web/MCP output - apply this checklist rather than reviewing ad hoc.
Quick start
Copy the install prompt. Use the green button above this README.
Send it to your agent. Paste it into your coding agent’s chat and send.
Review the setup. Your agent checks the skill’s instructions, requirements, and installation scope.
Personal pre-merge security gate for agent tooling - skills, subagents, slash commands, hooks, shell/sync scripts, dotfiles, settings.json, and plugin/MCP trust. Also scans for user-specific absolute paths, device/vault overfitting, and hardcoded personal constants (names, emails, handles, personal repo URLs, vault/project names) in shared tooling - anything the agent should instead infer at runtime or ask for live - and can fix them (prefer ~/ on macOS). Scans any file an agent reads as instructions for text hidden from the human reviewer - invisible Unicode, ASCII/tag smuggling, zero-width characters, bidi overrides - so use it whenever asked whether a skill, prompt, rules file, or pasted content has hidden or invisible instructions in it. MUST be used before committing or merging any change to ~/.agents or ~/.claude, before keeping or enabling a new or changed hook (PreToolUse/PostToolUse/SessionStart in settings.json - "review this hook", "check my hook before I keep it"), before installing or trusting a plugin or MCP server, and for any automation that runs commands, touches files, or consumes untrusted agent/LLM/web/MCP output - apply this checklist rather than reviewing ad hoc.
About this listing
Category
Security
Reported license
MIT
Listing language (estimated)
English
Review status
Not individually reviewed
Agent compatibility
Atlas installation supports Claude Code, Codex, and Cursor. Skill-specific dependencies and features are checked during setup.
Claude Code
Codex
Cursor
GitHub Copilot
Gemini CLI