← All Skills
🧭
Compass Agent Budget and Safety Gates
A local-first configuration and skills suite for Claude Code, Codex, and Gemini that constrains coding agents with hard session budgets, dangerous-command and secret-write guards, plugin audits, a sandbox entry point, and bounded PR repair loops.
Key Features
- Hard session and daily budget ceilings
- Command, secret, and plugin checks
- Real OS sandbox entry point
- Verified PR repair with a human merge gate
Installation
Install with brew install dshakes/tap/compass and then run compass quickstart, which previews changes and asks first. You can instead clone the repository and run ./quickstart.sh, or add the dshakes/compass marketplace and install the compass plugin in Claude Code or Codex.
How to Use
Run compass doctor after installation. Set the ceiling with COMPASS_MAX_USD, and use compass scan, audit-plugin, and sandbox for secrets, third-party plugins, and untrusted commands. Enable pr-shepherd or scheduling only when you intend remote PR maintenance, keeping required checks and per-session human merge authority.
Requirements
Requires Git and a supported agent. The manual, guards, and CLI do not need API keys; cross-model and autonomous PR workflows need the corresponding model login and GitHub permissions. Full quickstart backs up and links user-level ~/.claude or ~/.codex configuration to the repository, so review its preview first. Guards are defense in depth, not a security boundary. Automated flows can read CI logs, commit, push, and create or repair PRs, while merge still requires explicit authority in the current session. Use least-privilege credentials.
Related Skills