reins
Security controls for AI agents — deterministic policy enforcement, OWASP ASI10 scanning, and audit trails.
pinned to #d5bc85dupdated 3 months ago
Ask your AI client: “install plugins/reins”.
Requires the metahub MCP server installed in your client. Set up MCP.
mh install plugins/reinsmetahub onboarded this repo on the author's behalf.
If you own github.com/pegasi-ai/reins on GitHub, claim the listing to take over publishing. Your claim preserves the existing eval history and badges; only the curator label is replaced with verified-publisher on your next publish.
Stars
408
Last commit
3 months ago
Latest release
published
- #agent-observability
- #agent-security
- #ai-monitoring
- #ai-safety
- #audit-trail
- #browser-automation
- #claude-code-marketplace
- #claude-code-plugin
- #claude-code-skill
- #cua
- #human-in-the-loop
- #intervention
- #mcp
- #openclaw-security
Automated checks the publisher passed at publish time — structure, docs, safety, and whether the artifact behaves as claimed.d5bc85d· 3 months ago
Behavioral checks haven't run yet: the sandbox couldn't execute this artifact (it may need credentials we don't provide, or an unsupported build). An environment limit, not a verdict.
Kind-specific
3 passed1 warningPlugin: bundled artifacts presentwarn
Couldn't find a skills/ subdir or an MCP server config inside the plugin
A plugin is most useful when it bundles ≥ 1 skill or an MCP server.
Plugin: manifest fields complete
Plugin: bundle shape
empty bundle
Plugin: manifest location
manifest at .claude-plugin/plugin.json (modern convention)
Release history
1- releasecurrentd5bc85dwarn3 months ago
Contents
In Greek myth, Athena gave Bellerophon the golden bridle — reins included — that let him guide Pegasus. Reins applies the same idea to AI agents: raw power is not enough — what matters is making it controllable.
Reins enforces deterministic security policies on every agent action, scans your configs for OWASP ASI10 vulnerabilities, and tracks drift over time. Policies evaluate in under 50ms. Works with Claude Code PreToolUse and PostToolUse hooks, OpenClaw, and any MCP-compatible agent.
Quickstart
npm install -g @pegasi-ai/reins
reins init
Claude Code Skill
Install the Reins skill to give Claude Code awareness of your security posture:
mkdir -p ~/.claude/skills/reins
curl -o ~/.claude/skills/reins/SKILL.md \
https://raw.githubusercontent.com/pegasi-ai/reins/main/.claude/skills/reins/SKILL.md
Or clone the repo — the skill is included at .claude/skills/reins/ automatically.
Demo
An OpenClaw agent tries to bulk-delete 4,382 Gmail messages. Reins blocks it before execution.
What Reins does
- Prevent — Block destructive actions before execution. Score irreversibility. Detect risky browser state.
- Pause — Route high-impact actions through terminal or messaging approval flows. Require explicit
CONFIRM-*tokens for catastrophic operations. - Prove — Preserve an immutable audit trail of every decision, approval, and block.
Security guarantees
- Zero Trust — every action evaluated before execution
- Synchronous — agent cannot proceed until the hook exits
- No network in the hot path — policies cached locally, enforced offline
- Fail-closed — any unhandled hook error blocks the action
- Immutable audit — append-only JSONL at
~/.openclaw/reins/decisions.jsonl
Documentation
Full docs at reins.sh/docs:
- Getting Started
- How It Works
- Security Policies
- CLI Reference
- Security Scan
- Reins Cloud
- Use as a Library
- Architecture
Contributing
PRs welcome. See CONTRIBUTING.md.
License
Apache 2.0 — see LICENSE.
Reviews
No reviews yet. Be the first.
Related
chrome-devtools-mcp
Reliable automation, in-depth debugging, and performance analysis in Chrome using Chrome DevTools and Puppeteer
ECC
Harness-native ECC plugin for engineering teams - 63 agents, 249 skills, 79 legacy command shims, reusable hooks, rules, MCP conventions, and operator workflows for Claude Code plus adjacent agent harnesses
ponytail
Lazy senior dev mode. Forces the simplest, shortest solution that actually works: YAGNI, stdlib first, no unrequested abstractions.
mh install plugins/reins