·
Last changedVersion:
This version passed the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 3. Classified findings closed: 2. Classified findings remaining: 1. Unclassified scanner findings remaining: 0. Review findings closed: 2. Review findings remaining: 16.
1
2
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
SKILL.md | Malicious Code & Command Execution | — | Low | Closed | |
SKILL.md | Supply Chain & Install-Time Trust | Install-time download and execute | Low | Closed |
3 findings
Use this skill when the user asks about policies, strict mode, custom scoring, disabling checks, org standards, or CI gating of readiness.
A policy is a small JSON file with three optional sections — criteria, extras, thresholds — that customise how AgentRC scores readiness.
AgentRC ships with three example policies in examples/policies/:
| Policy | What it does |
|---|---|
| 100% pass rate, raises impact on key criteria |
| Disables all repo-health checks, focuses on AI tooling |
| Disables AI checks, focuses on traditional quality |
Recommend these as starting points before writing a custom policy.
| Impact | Weight |
|---|---|
critical | 5 |
high | 4 |
medium | 3 |
low | 2 |
info | 0 |
Score = 1 − (deductions / max possible weight). Grades: A ≥ 0.9, B ≥ 0.8, C ≥ 0.7, D ≥ 0.6, F < 0.6.
showList policies currently in effect (from agentrc.config.json policies array, or none).
new <name>Scaffold policies/<name>.json with sensible defaults. Walk the user through:
observability for a static site).impact to high or critical for must-haves (e.g. readme, codeowners).0.7 (lenient), 0.85 (standard), 1.0 (strict).agentrc.config.json:
apply <path-or-pkg>Run agentrc readiness --json --policy <source> and re-render the report by handing off to the assess skill / ai-readiness-reporter agent. Supports chaining:
Combine policies with --fail-level to enforce a minimum maturity level in CI:
JSON policies can disable, override, and set thresholds — but cannot add new criteria. For new detection logic, point users at AgentRC's TypeScript plugin system (docs/dev/plugins.md).
observability, confirm and explain the trade-off.impact over disabling. Disabling hides the gap entirely; overriding lets it still appear in the report.--policy a.json,b.json.Get started with chainctlchainctl skill install public/github/acreadiness-policy:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/github/skills/acreadiness-policy:latest
MIT
HARDENING.md
LICENSE
SKILL.md