Agent skills

Agent skills for Claude Code and Codex.

The SIS agent skills teach your coding agent to use the sis command-line scanner on files that live on your machine. They run sis locally, keep the machine-readable report, and report what SIS found, what it could not examine, and what it refused to do. Pack v0.2.0, for sis 0.70.0.

Prerelease (pre-1.0). sis 0.70.0 is the current release; output formats, findings, verdicts and commands may change between versions while we collect feedback.

What the pack does, and does not do

• Local only. The skills run sis on your machine against local files. There is no hosted path and nothing is uploaded.
• No telemetry. The skills' helper scripts make no network requests, and sis sends no usage data. The skills fetch a release only through the setup flow below, after you approve it.
• A clean result is not proof about the file. A clean verdict records what SIS found under the coverage it achieved. The skills keep coverage gaps, omissions and refusals in every summary.
• Samples are not opened or run. Agents are told not to execute, render or open them.
• No hosted sandboxes. A host that cannot download or run a native binary is not supported; the skills do not fall back to uploading your file anywhere.

The skills

Install for Claude Code

The repository ships a Claude Code marketplace manifest. In Claude Code:

/plugin marketplace add payloadglass/sis-agent-skills
/plugin install sis-agent-skills@sis-agent-skills

Then ask: “Check whether sis is installed and verified.” Agent skills can contain executable code, so review the scripts before you install them.

Install for Codex

1. From the v0.2.0 release, download the pack ZIP (or the ZIP for a single skill) and SHA256SUMS.
2. Check the ZIP against SHA256SUMS.
3. Unpack it into your Codex skills directory: project-local .agents/skills/, or your user-level skills directory.

Each skill ZIP is self-contained, so you can install one skill without the rest.

The verified-install flow

The sis-setup skill is how the pack gets you a working sis:

1. Detect. It runs sis --version and compares the result with the minimum the pack declares. This step is read-only. If sis is current, it stops there.
2. Ask. If sis is missing or too old, it asks before downloading anything and shows what it will fetch.
3. Verify. The archive from the official release repository is checked against the release's SHA256SUMS, and its build attestation is checked with the GitHub CLI (gh attestation verify). A failed check is refused and nothing is unpacked.
4. Unpack to a new directory. Only after verification does it unpack, and then it runs the unpacked sis --version. It never pipes a download into a shell.

Without the GitHub CLI the attestation cannot be checked. The skill says plainly that release provenance is not verified, and continues only if you accept that.

Compatibility

• sis 0.70.0 or later. sis is prerelease (pre-1.0): output fields, finding kinds and verdicts can change between minor versions.
• An agent host that runs on a machine you control and can execute a local binary, such as Claude Code or Codex CLI.
• A platform sis ships for: Linux x86_64 or aarch64 (glibc 2.36 or newer), macOS, or Windows x86_64. Python 3.10 or newer for the helper scripts.
• On macOS with sis 0.70.0, sis sanitize release does not start its worker and refuses. Scanning and the other skills are unaffected.

sis itself comes from the official release. The skills repository holds the skills only.