by DavidCarliez · Codex Skill · ★ 58
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
git clone https://github.com/DavidCarliez/cover.gitTaken from the project's README on GitHub.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 58 |
| Forks | 5 |
| Language | Go |
| Category | Codex Skill |
| License | Apache-2.0 |
| Quality Score | 68/100 |
| Last Updated | 2026-10-30 |
| Created | 2026-08-21 |
| Platforms | claude-code, codex, go |
| Est. Tokens | ~22k |
Cover Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow. Install · Quick start · Policies · Monitoring · Pi / OMP · Security Cover is a bidirectional privacy proxy for AI coding agents.
Looking for a cover alternative? If you're comparing cover with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Self-hosted PII redaction proxy for LLM APIs and agent CLIs. Scrubs names, emails and secrets from Claude Code
AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」（网安法·PIPL·等保2.0·数据出境·AI标识），并给出境内模型替代建议；可作运行时防护拦截注入与数据外泄 · 中文优先
Zero-dependency TypeScript secret and PII redaction for any SDK, logs, HTTP, LLM prompts, and scoped MCP tool
Reusable project context and specialist workflows for the AI tools you already use. Agents, skills, rules and
Governance gateway for AI agents — bounded, auditable, session-aware control with MCP proxy, shell proxy & HTT
Find and redact secrets in AI coding agent histories (Claude Code, and more).
Explore other popular codex skill tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: