Policy Configuration

Define security rules for AI skill validation

Click "Parse" to view the configuration

failOn

Minimum severity to fail the check

critical, high, medium, low

blockSecrets

Block scans with hardcoded secrets

true / false

blockDestructiveCommands

Block destructive shell commands

true / false

requirePermissionManifest

Require permission manifest YAML

true / false

allowExternalDomains

Allowed external network domains

list of URLs

blockedCommands

Commands that are always blocked

list of commands

maxFileSizeMB

Maximum file size to scan

number (MB)

maxFiles

Maximum files per scan

number

severityOverrides

Override finding severities

rule/category + override