agent-governance
Patterns and techniques for adding governance, safety, and trust controls to AI agent systems. Use this skill when: - Building AI agents that call external tools (APIs, databases, file systems) - Implementing policy-based access controls for agent tool usage - Adding semantic intent classification to detect dangerous prompts - Creating trust scoring systems for multi-agent workflows - Building audit trails for agent actions and decisions - Enforcing rate limits, content filters, or tool restrictions on agents - Working with any agent framework (PydanticAI, CrewAI, OpenAI Agents, LangChain, AutoGen)
Install
With your agent
Install OMGSkills skill "github/awesome-copilot:skills/agent-governance" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/github/awesome-copilot /tmp/awesome-copilot && ln -s /tmp/awesome-copilot/skills/agent-governance ~/.claude/skills/agent-governanceFrom README
Agent Governance Patterns Patterns for adding safety, trust, and policy enforcement to AI agent systems. Overview Governance patterns ensure AI agents operate within defined boundaries — controlling which tools they can call, what content they can process, how much they can do, and maintaining accountability through audit trails. When to Use Agents with tool access: Any agent that calls external tools (APIs, databases, shell commands) Multi-agent systems: Agents delegating to other agents need trust boundaries Production deployments: Compliance, audit, and safety requirements Sensitive operations: Financial transactions, data access, infrastructure management --- Pattern 1: Governance Policy Define what an agent is allowed to do as a composable, serializable policy object.
More from this repo
ai-ready
Make any repo AI-ready — analyzes your codebase and generates AGENTS.md, copilot-instructions.md, CI workflows, issue...
acquire-codebase-knowledge
Used when the user explicitly asks to map, document, or onboard into an existing codebase.
apple-appstore-reviewer
Serves as a reviewer of the codebase with instructions on looking for Apple App Store optimizations or rejection...