pre-execute-check
Check AxonFlow governance policy before executing commands, writing files, or modifying any state. Also scan file content for PII before writing. Us…
它会碰到什么
这一栏是扫描器报的事实，不是结论。命中多不等于有毒（安全工具、规则库、示例脚本本来就会包含危险写法），命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系，需要你自己看。
技能内容
Before using tools that modify state (terminal commands, file writes, file edits, MCP operations):
Step 1: Check policy
Call the check_policy MCP tool with:
connector_type:codex.Bash(for commands),codex.Write(for file writes), or the appropriate tool typestatement: the command or content to checkoperation:execute
If the response shows allowed: false, do NOT proceed. Report the block reason to the user.
Step 2: For file writes — also scan content for PII
If you are writing a file and the content might contain sensitive data (names, SSNs, credit cards, emails, phone numbers, addresses, medical records, financial data), call the check_output MCP tool with:
connector_type:codex.Writemessage: the content being written
If a redacted_message is returned, write the redacted version instead. If allowed: false, do not write the file.
These checks take 2-5ms and protect against dangerous commands, SQL injection, credential access, SSRF, path traversal, and PII exposure.
想直接用这个技能？
本站把开放许可（MIT / Apache 等）的技能按仓库打包整理到网盘，点一下转存到你自己的网盘，不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接，不打包。
它属于哪个仓库
plugins/getaxonflow/axonflow-codex-plugin/skills/pre-execute-check/SKILL.md