Yabbie Net

A safety net for AI agents. Catches unsafe tool calls before they execute.

This SKILL.md is internally coherent, but it only points to an npm package (yabbie-net) — the registry package is the actual code that will run. Before installing: - Inspect the package and GitHub repository (package.json, proxy implementation) to ensure code matches claims. Verify the GitHub repo and package owner identity. - Prefer project-scoped install and pin the exact version (npm install [email protected]) rather than a floating tag or global install. - Run the proxy in a sandbox/test environment first to observe behavior and audit logs (.yabbie/audit.jsonl). Check file permissions on the audit log so it doesn't leak sensitive data. - Keep tier2 disabled unless you trust the external judge; if you enable tier2, understand that truncated tool metadata and your taskContext will be sent to the configured provider and that an API key (ANTHROPIC_API_KEY) is required for Anthropic. - If you rely on this for security, perform an independent code audit or use a vetted binary/build from a release channel; consider reproducible builds or verifying the npm package integrity. If you want, I can fetch and summarize the yabbie-net repository (package.json, README, proxy code) so you can make a more informed decision — note that requires network access and the actual package source to be available.