agent-passport-system

agent-passport-system is an Agent security & guardrails skill for AI agents, published by aeoess in the agent-passport-system repository on GitHub. Skillspace rates agent-passport-system F (45/100) and the safety scan rated it risky; the rating is based on static analysis only.

Enforcement and accountability layer for AI agents. Bring your own identity (did:key, did:web, SPIFFE, OAuth, did:aps). Gateway enforcement boundary, monotonic narrowing, cascade revocation, spending controls, data lifecycle, observation governance (telemetry scopes, derivation rights, behavioral memory). Use when agents need scoped delegation, trust scoring, constraint enforcement, or cryptographic audit trails. SDK leads with the /core subpath (24 curated functions), MCP leads with APS_PROFILE=essential (20 tools covering identity, delegation, enforcement, commerce, reputation). 4,098 tests. 8 framework adapters: Stripe, Composio, IBAC/Cedar, LangChain, CrewAI, MCP, A2A, Gonka. Full surface area (107 modules, 150 MCP tools) still available under APS_PROFILE=full and the root import. SDK 3.3.1 on npm adds the Delegated Action Evidence release: bilateral pair reconciliation with five mismatch classes, verifier-side revocation observation receipts under a stated freshness contract,…

Grade
F
Quality
45 / 100
Safety
Risky
GitHub stars
31

Unproven: rated by static analysis only, not yet compared head-to-head.

This rating describes the version of the repository we crawled; it may have changed since.

View source on GitHubaeoess/agent-passport-system

Our review

Architecture
95 / 100
Maturity
Structured: ships references or scripts
Security scan
High-risk patterns
License
Apache-2.0
Adoption
Adopted by 0 other repositories, in 0 collections

What the scanner flagged

  • references sensitive credential env

Not checked yet

  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Better-rated skills in Agent security & guardrails

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.