grimoire
The agent-security wards (standing rules skill + PreToolUse deny-list) plus the commit workflow. Ships the repo's skills/ and the WARDS hooks.