Topic

CI Security Gates

Checks wired into continuous integration that fail a build or block a merge when a policy rule matches, usually signalled by process exit codes and machine-readable findings.

Current clusters

build1 publisher

A skills.lock file puts Agent Skills behind the same digest check as an npm dependency

AgentWarden scans Markdown skills and MCP configs, exits non-zero on a rule match, and records a SHA-256 in skills.lock. It is also the project whose post documents the missing lockfile.

Publishers:dev.to

Reality

Evidence38
Adoption8
Hype gap+10
Incentives70
Confidence45