reins
Stop AI agents from doing things you didn't ask for.
Install / Use
npx skills add pegasi-ai/reinsInstalls into whichever agent you are using.
SKILL.md
Installable skill definition
Quality Score
Category
SecuritySupported Platforms
Our assessment of reins
reins scores 78/100 on our quality scale, 1000th of 1,099 Security skills we index.
Its SKILL.md is 3.3 KB long, well organised into 8 sections with 2 code examples: a solid amount of guidance for an agent.
It has 392 GitHub stars, a meaningful sign that others use it.
Maintenance, license and trust
- The repository was last updated 25 days ago, so reins is actively maintained.
- Our last check on 2026-10-18 found the source still online.
- It is released under the Apache-2.0 license, a permissive license that allows use, modification and commercial use with attribution.
- Its trust signals score 95/100, with 1 caution from licensing, adoption, age or documentation. These come from repository metadata, not a code audit — read the skill file before letting an agent act on it.
Safety scan
No issues foundOur scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful.
AI review by kimi-k2.7-code on 2026-09-24. Automated pattern scan on 2026-09-24. It catches known dangerous patterns, not every risk — read a skill before letting an agent act on it.
reins compared with similar skills
All 4 of these similar skills score higher than reins; compare them before choosing.
| Skill | Score | Stars | Updated | Format |
|---|---|---|---|---|
| reins (this skill)by pegasi-ai | 78 | 392 | 25d ago | SKILL.md |
| Agent-Reachby Panniantong | 100 | 109.2k | today | CLAUDE.md |
| headroomby headroomlabs-ai | 100 | 78.9k | today | CLAUDE.md |
| CowAgentby zhayujie | 100 | 47.8k | today | CLAUDE.md |
| Scraplingby D4Vinci | 100 | 97.9k | today | MCP Server |
Frequently asked questions
- How do I install reins?
- Run
npx skills add pegasi-ai/reins. The install tabs above show the steps for each supported agent. - Which AI agents does reins work with?
- It is written for Claude Code, as a SKILL.md file. Other agents that read the same format can often use it too.
- Is reins safe to use?
- Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful. It is Apache-2.0-licensed and scores 95/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
- Is reins still maintained?
- The repository was last updated 25 days ago, so reins is actively maintained.
Skill content
View source on GitHubIn Greek myth, Athena gave Bellerophon the golden bridle — reins included — that let him guide Pegasus. Reins applies the same idea to AI agents: raw power is not enough — what matters is making it controllable.
Reins enforces deterministic security policies on every agent action, scans your configs for OWASP ASI10 vulnerabilities, and tracks drift over time. Policies evaluate in under 50ms. Works with Claude Code PreToolUse and PostToolUse hooks, OpenClaw, and any MCP-compatible agent.
Quickstart
npm install -g @pegasi-ai/reins
reins init
Claude Code Skill
Install the Reins skill to give Claude Code awareness of your security posture:
mkdir -p ~/.claude/skills/reins
curl -o ~/.claude/skills/reins/SKILL.md \
https://raw.githubusercontent.com/pegasi-ai/reins/main/.claude/skills/reins/SKILL.md
Or clone the repo — the skill is included at .claude/skills/reins/ automatically.
Demo
An OpenClaw agent tries to bulk-delete 4,382 Gmail messages. Reins blocks it before execution.
What Reins does
- Prevent — Block destructive actions before execution. Score irreversibility. Detect risky browser state.
- Pause — Route high-impact actions through terminal or messaging approval flows. Require explicit
CONFIRM-*tokens for catastrophic operations. - Prove — Preserve an immutable audit trail of every decision, approval, and block.
Security guarantees
- Zero Trust — every action evaluated before execution
- Synchronous — agent cannot proceed until the hook exits
- No network in the hot path — policies cached locally, enforced offline
- Fail-closed — any unhandled hook error blocks the action
- Immutable audit — append-only JSONL at
~/.openclaw/reins/decisions.jsonl
Documentation
Full docs at reins.sh/docs:
- Getting Started
- How It Works
- Security Policies
- CLI Reference
- Security Scan
- Reins Cloud
- Use as a Library
- Architecture
Contributing
PRs welcome. See CONTRIBUTING.md.
License
Apache 2.0 — see LICENSE.
Related Skills
Agent-Reach
109.2kGive your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
headroom
78.9kCompress tool outputs, logs, files, and RAG chunks before they reach the LLM. 20% fewer tokens for coding agents, 60-95% fewer tokens for JSON, same answers. Library, proxy, MCP server.
CowAgent
47.8kOpen-source personal AI assistant & Agent Harness. Plans tasks, runs tools and skills, self-evolves with memory and knowledge. Multi-agent, multi-model, multi-channel. Lightweight, extensible, one-line install.
Scrapling
97.9k🕷️ The BEST Web Scraping framework that handles everything from a single request to a full-scale crawl! Don't be shy, join here: https://discord.gg/EMgGbDceNQ and follow here for daily tips and tricks: https://x.com/Scrapling_dev
Languages
Trust signals
From repository metadata: license, adoption, age and documentation. Not a code audit — see the Safety scan above for what the skill file itself contains.