Put agent PR actions behind human approval.
What it does
Configures human approval gates and signed receipts for an agent's pull-request and CI actions.
When to use it
Use when setting up a project where an agent reviews or merges pull requests, triages issues, publishes releases, or changes CI.
How to use it
Give it a project to configure; it installs the governance plugin and sets up a project policy, signing key, and receipt directory.
What you provide
- An existing project
Latest review
What you need · 1
Requires Node.js to extract the public key from the signing-key file for receipt verification.
Access · 3
This skill
wshobson/agents/review-agent-governance
Execute
Installs the review governance plugin
protect-mcp
Execute
Installs protect-mcp for key setup
@veritasacta/verify
Execute
Installs the receipt verifier