fohte/runok-claude-code-plugin (runok)

runok: Manage runok configuration files (runok.yml) for command execution permissions. Use this skill whenever the user mentions "runok", asks about runok rules, runok.yml, runok.local.yml, or runok CLI commands (runok check, runok exec, runok init, runok test, runok audit, runok update-presets). Also trigger when the user wants to: add/edit/delete allow/deny/ask rules for commands, set up sandbox presets for filesystem or network isolation, configure command patterns with wildcards or alternation, write CEL when-clauses for conditional rules, use extends to inherit shared configs, use official presets (runok-presets), write inline tests for rules (runok test), view audit logs, initialize a new runok.yml, investigate why a command was allowed or denied, or understand how runok pattern matching works. This skill MUST be used for any question about runok — including "what is runok", "how does runok work", debugging unexpected rule matches, and editing any runok configuration file. If you see runok.yml or runok.local.yml in the project, use this skill to understand and modify them.

Claude Skills are markdown + scripts loaded into Claude Code; scanned with the same pipeline.

Source:

github.com/fohte/runok-claude-code-plugin

Provenance:

Found by crawling (provenance, not a security rating)

We found this by crawling public sources and nobody has attested to it. That is how most of the registry gets here, and it is not a mark against the artifact — it only means no authenticated act of publication is on record. An artifact can be the vendor's own and still appear here.

2 critical findings reported by cisco-skill-scanner. The composite score alone does not reflect this — read the per-scanner reports below.