Saucebox Registry
← Browse

@armorerlabs/armorer

A

Use Armorer as the TypeScript control plane for managed local agents.

skillclaude

Install

agr install @armorerlabs/armorer --target claude

Writes 22 files into .claude/skills/, pinned to git-48d3d485.

  • .claude/skills/armorer/.dockerignore
  • .claude/skills/armorer/.gitignore
  • .claude/skills/armorer/AGENTS.md
  • .claude/skills/armorer/CONTRIBUTING.md
  • .claude/skills/armorer/Cargo.lock
  • .claude/skills/armorer/Cargo.toml
  • .claude/skills/armorer/HUMANS.md
  • .claude/skills/armorer/LICENSE
  • .claude/skills/armorer/README.md
  • .claude/skills/armorer/SKILL.md
  • .claude/skills/armorer/WORKFLOW.md
  • .claude/skills/armorer/curl-console.log
  • .claude/skills/armorer/docker-compose.yml
  • .claude/skills/armorer/install.log
  • .claude/skills/armorer/mise.toml
  • .claude/skills/armorer/mkdocs.yml
  • .claude/skills/armorer/package.json
  • .claude/skills/armorer/pnpm-lock.yaml
  • .claude/skills/armorer/pnpm-workspace.yaml
  • .claude/skills/armorer/rust-toolchain.toml
  • .claude/skills/armorer/test_health.js
  • .claude/skills/armorer/tsconfig.base.json

Document

Armorer Skill

Use Armorer as the TypeScript control plane for managed local agents.

Commands

Prefer these commands for local operations:

pnpm armorer -- list
pnpm armorer -- core status
pnpm armorer -- jobs list
pnpm armorer -- install <agent> --yes --skip-scan
pnpm armorer -- run <agent>
pnpm armorer -- stop <agent>
pnpm armorer -- uninstall <agent> --force

Verification

Never report success from intent alone. Verify with:

  • CLI output from pnpm armorer -- list
  • job records in ~/.armorer/jobs
  • updated config in ~/.armorer/.env, ~/.armorer/vault.json, or ~/.armorer/registry.json
  • running process/container evidence where relevant
  • UI route health when working on the self-hosted app

Source Map

  • Core contracts: packages/shared/src/
  • Core runtime: packages/core/src/
  • Flue harness: packages/agent-flue/src/
  • CLI: packages/cli/src/
  • Playbooks: catalog/playbooks/
  • UI routes: web/armorer-ui-selfhost/src/app/api/

Armorer-Guard is external. Call it through the configured external boundary; do not vendor it into this repository.

Trustgrade A

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • passType matchnot applicable to this artifact type

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • passLicense

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-48d3d485f3392026-07-31