Instructions file CodexOpenCode
AGENTS.md instructions for BackBond/agent-scan: Run npx -y @backbond/[email protected] vet-tools --stdin < tools-list.json before attaching an unfamiliar proposed toolset. Run npx -y @backbond/[email protected] scan for the broader environment scan. In a network-isolated environment, use the operator-staged…
Skill Claude CodeCodex
Vet MCP tools/list and local AI-agent tool configuration before attachment. Use to check tool poisoning, forced invocation, confusable tool names, unconstrained shell or code inputs, risky fetch-plus-privilege combinations, delegation exposure, or elevated-permission requests with a pinned offline static gate.
MCP server Claude CodeCodexCursor
Local static screening for MCP and AI-agent tool metadata before attachment. Runs locally from the @backbond/agent-scan npm package.