agentpluginsdirectory
Rul1an avatar

assay

v6.9.0

by Rul1an · author: Assay

Operate Assay's install-to-evidence golden path with explicit failure boundaries.

What assay does, in the publisher's words

Assay

Agents got real tool access through MCP, and tool poisoning, rug pulls, and confused-deputy OAuth came with it. Most tools scan a server or filter a prompt. Assay sits at the tool-call boundary and does three things, in order.

One golden path: the release-pinned agent journey records the nine driven CLI/MCP steps and their exit/stdout contracts. Its protected-action fixture lives in examples/privileged-action-gate/.

  • Enforce. A deterministic, fail-closed gate decides every tools/call before it runs, with the precise reason for each allow or deny. On Linux it adds real kernel enforcement: an eBPF/LSM IPv4/TCP connect-egress block and a Landlock TCP-connect port allowlist, both opt-in and fail-closed. A policy it cannot express exactly is refused, never half-applied.
  • Prove. Each decision and observed effect becomes an offline-verifiable, tamper-evident evidence bundle: the verdict, the pre-call establish journey, and declared-vs-observed conformance: all reviewable in CI, with no hosted backend.

From the project README, punctuation lightly normalized · Open the README on GitHub

Skills
1
MCP servers
1
Stars
11
License
MIT
Repo created
2025-12-20
Last pushed
2026-10-01
Publisher type
User
Version
6.9.0

Links

Skills · 1

assay-golden-path
Drive Assay's install-to-evidence golden path and interpret its stdout and exit codes. Use when an agent must operate or diagnose Assay; do not use it to infer provider execution, external side effects, or a clean result from missing output.

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.

MCP servers · 1

assaystdio
assay-mcp-server --policy-root .

Read from the plugin's own mcp.json. We list environment variable names, never values.

Category

Other. Assigned by this directory. Agent Plugins 1.0.0 has no category field, so no manifest declares one.

Related by publisher and keywords

  • worldmonitorkoala73

    World Monitor agent plugin: live global-intelligence MCP servers plus task-focused agent skills for country risk, conflict, markets, chokepoints, energy, climate, and related situational awareness.

  • mem0mem0ai

    Cross-session memory and token savings for coding agents.

  • context7upstash

    Up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your LLM context.

  • hyperframesheygen-com

    HyperFrames by HeyGen. Write HTML, render video. Compositions, GSAP and runtime adapter animations, captions, voiceovers, audio-reactive visuals, and website capture for HyperFrames.

  • chrome-devtoolsChromeDevTools

    Reliable Chrome automation, debugging, and performance analysis for AI agents.

  • agentic-bundle-aas-accessibility-inclusive-uxsickn33

    Portable skills-only "AAS Accessibility & Inclusive UX" plugin from Agentic Awesome Skills.

Add the verified badge to your README[![Verified by AgentPluginsDirectory.com against Schema 1.0.0](https://agentpluginsdirectory.com/badge.svg)](https://agentpluginsdirectory.com/plugins/assay)

✓ Verified . We fetched the manifest from GitHub and checked it against the official Agent Plugins 1.0.0 schema at agent-plugins.org.