Repository navigation
Share the proposal forbidden-key list with AgentKit #84
Description
SkillX personal-kit proposals (#83) refuse raw session fields (transcript, prompt, messages, env, secrets, cwd, history, ...) using a fixed forbidden-key list. AgentKit will produce these proposals (G2 #2278) and should refuse the same keys locally before upload.
Proposal: define one versioned forbidden-key list (and secret/absolute-path rules) in the proposal envelope spec skillx.kit-proposal/v1, consumed by both SkillX and AgentKit, with shared test vectors.
Activity
fix(kits): share the proposal policy and harden proposal scanning (#87)
mrgoonie commentedon Oct 16, 2026
Both sides are done, so I'm closing this as completed. SkillX defines a single versioned list, \skillx.kit-proposal-policy/v1, plus shared vectors (\kit-proposal-policy-vectors-v1.json) in @skillx/contracts\ (#87). AgentKit vendors the same policy and vectors in \�pps/cli/internal/core/proposalpolicy, with \provenance.json\ pinning the source, and runs the vector tests (bestagentkits/agentkit#2439). \�k skills kit publish\ applies the policy locally before upload, including on --dry-run\ (bestagentkits/agentkit#2454).