Agents Playbook

The AgentsKit GitHub organization requires two-factor authentication for organization members. This was verified through the organization settings API before preparing the assessment.

AgentsKit organization members receive read-only repository access by default. Higher permissions require explicit assignment by an organization owner, and the organization currently has no outside collaborators.

The active Protect main ruleset requires all changes to refs/heads/main to pass through a pull request and eight verified CI, package, browser, CodeQL, dependency-review, and audit checks. Direct commits are blocked and the ruleset has no bypass actors.

The active Protect main ruleset prevents deletion and non-fast-forward updates of refs/heads/main and has no bypass actors.

Pull-request workflows run fixed commands and do not interpolate pull-request titles, commit messages, branch names, authors, or other attacker-controlled metadata into shell commands. Third-party Actions are pinned to full commit hashes and checkout credentials are not persisted.

Untrusted contributions run through pull_request workflows rather than pull_request_target. GitHub withholds repository secrets from fork pull requests, checkout credentials are not persisted, and the repository default GITHUB_TOKEN permission is read-only.

Official repository, documentation, issue, package, release, ecosystem, and security channels listed by the project use HTTPS.

The @agentskit/playbook package is distributed by npm over authenticated HTTPS with registry integrity metadata. Version 0.1.1 also has an immutable annotated Git tag and a public GitHub release resolving to the licensed source commit.

GitHub secret scanning and push protection are enabled. Contribution and security policies prohibit submitting credentials, private customer information, and confidential repository details, while the published CLI includes a secrets gate for adopting repositories.

The README and public documentation cover incremental adoption, installation, CLI commands, gate configuration, architecture and governance patterns, local-first discovery, agent handoffs, verification commands, and the supported public interfaces of the released functionality.

The published package metadata identifies the public GitHub issue tracker as its defect-reporting channel, the repository exposes that tracker publicly, CONTRIBUTING.md explains the public change workflow, and SECURITY.md directs vulnerabilities to private reporting instead of public issues.

Public GitHub issues and pull requests are the documented mechanisms for discussing production lessons, proposed patterns, implementation changes, and usage obstacles, except for vulnerabilities or confidential data.

CONTRIBUTING.md explains evidence requirements, document shape, scope, gate expectations, review, tombstoning, license boundaries, conduct, and the private security-reporting path.

Software source in the repository is licensed under the OSI-approved MIT License. The separately identified editorial corpus is licensed under CC BY 4.0.

The current @agentskit/playbook@0.1.1 software release declares and distributes the OSI-approved MIT License. npm latest resolves to this release.

The authoritative repository contains a root LICENSE file with the complete MIT License text and a separate LICENSE-CONTENT file with the complete CC BY 4.0 terms and scope.

The @agentskit/playbook@0.1.1 npm tarball includes its complete MIT LICENSE alongside the software, and the corresponding immutable source tag contains the same package license.

The authoritative source repository is publicly readable at a stable HTTPS URL.

The public Git history and linked pull requests record every committed change, its author, and timestamp.

Direct application dependencies are declared in package.json and exact transitive resolutions are committed in pnpm-lock.yaml. The released @agentskit/playbook CLI separately declares zero runtime dependencies.

Not applicable to this assessment scope: Agents Playbook develops its documentation application, canonical corpus, deterministic discovery artifacts, and @agentskit/playbook CLI in one authoritative repository. External AgentsKit packages are declared dependencies rather than additional project codebases compiled into the release.

Generated executable application outputs are not committed. Next.js build output, node_modules, coverage, Playwright output, package archives, and temporary build directories are excluded; CI rebuilds the application and package from source.

The 270 tracked repository files are reviewable source, configuration, Markdown/MDX, JSON, text, CSS, workflows, and SVG content assets. The tracked tree contains no executable application binaries, compiled libraries, package archives, fonts, or opaque binary artifacts.

SECURITY.md identifies GitHub private vulnerability reporting as the security contact, requests reproduction and impact details, defines acknowledgement and assessment targets, explains supported versions, and describes coordinated disclosure.