Skill 1
Scoping Agent Tool Authority
Use when an agent, connector, MCP server, browser profile, repository workflow, or automation is about to receive new tool access or a broader identity.
Back to Skill Library
Agent governance workflow library
Agent tool authority review
Review context quarantine, permission cards, service identities, capability diffs, tool-result influence, browser profiles, and GitHub inputs before changing agent authority.
This is a complete workflow library with 3 individual skills. Download the full library or pick the specific skill folder your team needs first.
Individual skills in this library
Use one skill at a time, or keep the full workflow together.
Some AI tools expect one skill folder per upload. Download the full library when you want the whole workflow, or download an individual skill when you only need one job done.
Skill 2
Quarantining Agent Inputs
Use when webpages, emails, documents, issues, comments, repository text, retrieval results, or tool output may influence an agent with privileged tools.
Skill 3
Diffing Agent Capabilities
Use when a model, prompt, skill, connector, tool, identity, retrieval source, memory path, or runtime change may alter what an agent can read, influence, retain, or change.
Security fit check
Is the public Agent tool authority review library enough, or does this need deeper review?
Use the public library when the workflow is low-risk, the inputs are already sanitized, and a team member can review the output before it reaches a buyer or customer.
Do deeper review when this workflow touches real tools, data sources, role ownership, approval paths, or customer-facing output.
Tool authorityAI OperationsSecurityPlatform Owner
Good deeper-review trigger signals
- The workflow touches customer, prospect, CRM, proposal, security, pricing, or campaign data.
- Different teams disagree on the approved source of truth.
- The AI output could become customer-facing, revenue-impacting, or compliance-sensitive.
- You need reusable eval checks before asking more people to use the workflow.