Help us improve
Share bugs, ideas, or general feedback.
Share bugs, ideas, or general feedback.
Share bugs, ideas, or general feedback.
By geoffbelknap
ASK (Agent Security Framework) compliance reviewer, architecture designer, and threat analyst. Three skills: ask-review (25-tenet audit), ask-design (enforcement architecture and config generation), ask-threats (threat model and XPIA analysis). Updated for ASK 2026.03.
npx claudepluginhub geoffbelknap/geoffs-plugins --plugin ask-frameworkASK (Agent Security Framework) architecture designer and configuration generator — ASK 2026.03. Use this skill whenever the user wants to: design ASK-compliant agent architectures; generate configuration files (Mind/mind.yaml, Gateway policy, Egress proxy denylist, Enforcer sidecar, Delegation bus, Audit log format); understand ASK enforcement layers; design multi-agent systems with proper delegation and isolation; plan deployment topology; or evaluate how enforcement components fit together. Trigger on any mention of ASK architecture design, enforcement layer design, mind.yaml generation, gateway policy creation, egress proxy configuration, enforcer sidecar setup, delegation bus design, ASK deployment topology, multi-agent architecture, agent isolation design, or ASK configuration generation.
ASK (Agent Security Framework) compliance reviewer — ASK 2026.03 (25 tenets). Use this skill whenever the user wants to: review code, specs, architecture, or designs for ASK compliance; check whether an AI agent system satisfies ASK tenets; verify cognitive model separation (Constraints/Session/Identity); assess trust spectrum positioning; audit agent lifecycle and halt governance; check principal model coverage; or evaluate whether enforcement logic is correctly placed outside the agent's trust boundary. Trigger on any mention of ASK compliance review, ASK tenet audit, agent compliance check, cognitive model verification, trust spectrum assessment, enforcement gap identification, ASK checklist, agent quarantine review, halt governance audit, or principal model verification.
ASK (Agent Security Framework) threat analyst — ASK 2026.03. Use this skill whenever the user wants to: analyze threats to AI agent systems; assess XPIA (cross-prompt injection attack) kill chain posture; evaluate attack surfaces; review defensive architecture against specific threat categories; understand traditional vs novel vs hybrid threats to agents; analyze MCP security risks; assess identity/memory poisoning risks; evaluate behavioral drift detection; review multi-agent cascade failure risks; or understand ASK framework limitations and known gaps. Trigger on any mention of agent threat model, XPIA analysis, prompt injection defense, agent attack surface, MCP security, identity poisoning, behavioral drift, cascade failures, agent threat assessment, kill chain analysis, or ASK limitations.
Share bugs, ideas, or general feedback.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Security controls for AI agents — deterministic policy enforcement, OWASP ASI10 scanning, and audit trails.
GoPlus AgentGuard — AI agent security guard. Blocks dangerous commands, prevents data leaks, protects secrets. 20 detection rules, runtime action evaluation, trust registry.
Security check + optimize skills for chat system prompts and agent pipelines, plus agent-security skills (check/optimize/meta-learning)
Self-audit AI agent, tool, and MCP-server code for security and reliability misconfigurations with Trustabl, the static analyzer for the OpenAI Agents SDK, Claude Agent SDK, Google ADK, and MCP. Ships two skills: trustabl-scan scans your agent code with Trustabl (via a bundled MCP server) right after you write or change it, before you commit — optionally matching your declared dependencies against the OSV database for known CVEs — and trustabl-enrich applies the scan findings directly to your source files as targeted code edits.
APort Agent Guardrails — security policy enforcement for every tool call. Intercepts tool use, evaluates against your passport policy, and blocks unauthorized actions.
Cybersecurity skills for AI agents — code audit, cloud, recon, IR, AI security, and more
Agency platform — manage AI agent teams with enforced isolation, credential scoping, and continuous audit
ASK (Agent Security Framework) compliance reviewer, architecture designer, and threat analyst. Three skills: ask-review (27-tenet audit), ask-design (enforcement architecture and config generation), ask-threats (threat model and XPIA analysis). Updated for ASK 2026.04.
A Claude Code plugin marketplace by Geoff Belknap.
| Plugin | Description |
|---|---|
| ask-framework | ASK (Agent Security Framework) compliance reviewer, architecture designer, and threat analyst — audit agent architectures against 25 security tenets, design seven-layer enforcement architectures, verify cognitive model separation, assess XPIA kill chain posture, analyze traditional/novel/hybrid threats, and generate compliant configurations. Updated for ASK 2026.03. |
# Add the marketplace
/plugin marketplace add geoffbelknap/geoffs-plugins
# Install a plugin
/plugin install ask-framework@geoffs-plugins
The ASK framework treats AI agents as principals to be governed, not tools to be configured. It assumes the agent is always compromisable and requires all enforcement to exist outside the agent's reach.
ASK defines four non-negotiable elements (Workspace, Mediation Layer, Audit Log, Human Override), a cognitive model (Mind/Body/Workspace with Constraints/Session/Identity separation), 25 tenets organized across 8 categories, seven enforcement layers, and a trust spectrum from Assisted to Delegated autonomy.
Full framework documentation: github.com/geoffbelknap/ask
Creative Commons Attribution 4.0 International (CC BY 4.0) — free to share and adapt for any purpose, including commercial, with attribution.