safe-ai-skill
Security firewall and supply-chain verifier for Solana AI development. Gates every Solana CLI command, SPL Token operation, Anchor invocation, and value-moving MCP call — requiring explicit approval for mainnet deploys, authority changes, and over-cap transfers. Runs a supply-chain verifier at every session start that scans skills and MCPs, flags telemetry preambles and plaintext JWTs, pins content hashes, and quarantines anything that drifted.
This npm package installs the safe-ai-skill CLI binary (the same binary that backs
the Claude Code plugin). The Claude Code plugin is installed separately.
Install
npm install -g @stbr/safe-ai-skill
# or
npx @stbr/safe-ai-skill <command>The package is scoped (@stbr/safe-ai-skill); the installed CLI command is safe-ai-skill.
Quick start
# Gate installs before they run
safe-ai-skill add skill <name|url> # any GitHub skill URL or catalog entry
safe-ai-skill add mcp <id|pkg|url> # any MCP; pins exact version before writing .mcp.json
safe-ai-skill add repo <url> # any clonable repo; pins to commit SHA
# Audit what is already installed
safe-ai-skill verify
# Show status: pins, quarantine list, active profile, live grants, recent decisions
safe-ai-skill status
# Hub-agnostic secure install: verify, diff, and approve before writing
safe-ai-skill install --from <url|ref>Claude Code plugin
The Claude Code plugin provides the runtime firewall (hooks into every Claude Code session). Install it separately:
claude plugin marketplace add solanabr/safe-ai-skill
claude plugin install safe-ai-skill@safe-ai-skillOnce installed, the firewall is live in every session — no per-skill configuration required.
How this package works
postinstall downloads the prebuilt safe-ai-skill-<platform> binary for your OS and
architecture from the GitHub Release matching this package version, verifies
its SHA-256 against the published SHA256SUMS file, and marks it executable.
The install fails loudly if the download or checksum verification fails — this
is a security tool; a broken silent install is unacceptable.
Supported platforms: macOS arm64, macOS x64, Linux x64, Linux arm64.
For unsupported platforms or offline installs:
cargo install safe-ai-skill