Reins — Runtime Security

Trust Score 61/100

from reins415

Deterministic runtime security hooks for agents: block dangerous shell and file actions, warn on risky ops, and log audits to Watchtower.

triggers:securitypolicyblockauditguardrailsreinswatchtower

GitHub SKILL.md

What it does

Reins adds deterministic PreToolUse and PostToolUse security hooks for agent runtimes. It enforces rules (allow/warn/block) for shell commands, file edits, and MCP calls, logs audit entries, and can integrate with Watchtower for centralized policies and immutable admin rules.

When to use it

Use Reins whenever an agent has permission to run shell or file operations, access external MCPs, or perform potentially destructive work — especially in production, shared, or sensitive environments. It's also useful during audits or when enforcing org-wide safety policies.

What's included

Scripts: install/init commands (npm package) and CLI helpers (reins init, reins status, reins audit, reins sync)
References: integrates with Watchtower (app.pegasi.ai) for org policies
Instructions: step-by-step install and CLI reference for policy management and auditing are in the skill body.

Compatible agents

Best suited for Claude Code and other agent runtimes that support pre/post tool hooks and shell interception.

Audit Summary

Reins is a runtime security hook system for agents that enforces policies on shell commands, file operations, and MCP calls. The SKILL.md is thorough with clear CLI reference, hook behavior documentation, and response format templates. However, the core npm package @pegasi/reins does not exist on the registry yet, making the skill completely non-functional. The install script failed with a 404. Concept is strong and timely but currently vaporware.

Watch Out

Package @pegasi/reins not published on npm — skill cannot be used today
reins upgrade auto-updates without user confirmation
Watchtower connection sends audit data to app.pegasi.ai (external telemetry)
Non-interactive init sets balanced security level by default — may not suit all environments

Missing Dependencies

@pegasi/reins (npm package not yet published)

Notes

Well-documented skill with a genuine security governance concept. The auto-update mechanism (reins upgrade) and Watchtower phone-home are mild security concerns but aligned with the product's purpose. Main issue is the package doesn't exist yet — the skill is aspirational documentation rather than usable software. Would benefit from references/ directory for policy examples and separating the CLI reference into its own file.

Information

Repository: reins
Stars: 415

Trust Score

Overall61

Security57

Code Quality72

Architecture55

Usefulness50

Related Skills

Readwise Reader Document Management

Manage Readwise Reader documents: list, save, search, move, tag, highlight, export and bulk-edit via official and custom CLIs.

TradeOS

Natural-language driven CEX trading and portfolio management for agents: API key vaulting, multi-exchange orders, DCA, arbitrage scanning, alerts and security r

ezBookkeeping API Tools

Command-line API tools for ezBookkeeping: record and query transactions, retrieve accounts/categories/tags, and fetch exchange rates for self-hosted personal fi

Kickbox Automation (Composio / Rube MCP)

Automate Kickbox workflows via the Composio Kickbox toolkit on a Rube MCP server: discover tools, manage connections, and execute schema-compliant tool calls.

Beaconstac Automation

Automate Beaconstac QR code and link management using the Rube MCP (Composio) toolkit.

Tmux Bridge

Give an agent controlled access to a local tmux terminal bridge so it can run shell commands, capture output, and manage sessions on the user's machine.

Java 25 & Spring Boot 4 Code Reviewer

Run focused, evidence-based code reviews for Java 25 and Spring Boot 4 projects — migration risks, architecture boundaries, null-safety (JSpecify), security, an

ArcKit — French Public Procurement (fr-marche-public)

Generates French public procurement (Dossier de Consultation des Entreprises) drafts aligned with the Code de la Commande Publique, UGAP frameworks, and DINUM d

Back to Skills