Gguard config

Skill sanjeewamadhuranga/grounding-guard/skills/gguard-config

Configure Grounding Guard — set per-verifier modes (block/warn/off), allowlist private or internal package names, point at private registries, or adjust timeouts.From its SKILL.md

Install

npx -y skills add sanjeewamadhuranga/grounding-guard --skill gguard-config

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

1.6 KB, as published. Nobody here has run it

Grounding Guard Config

Help the user create or edit their Grounding Guard configuration.

Config files (later overrides earlier, deep-merged):

~/.gguard.json — user defaults
.gguard.json in the project root — per-project overrides

Full schema with defaults:

{
  "verifiers": {
    "packages": "block",
    "imports": "warn",
    "gitrefs": "warn"
  },
  "allow": ["@myorg/*", "internal-*"],
  "registries": {
    "npm": "https://registry.npmjs.org",
    "pypi": "https://pypi.org"
  },
  "timeoutMs": 5000,
  "fetchTimeoutMs": 2500,
  "offline": false
}

Field notes:

verifiers.<name>: "block" (deny/exit-2), "warn" (non-blocking feedback), "off".
allow: glob patterns (* wildcard) of package/module names never checked against public registries. Use for private packages and monorepo-internal names.
Private npm registries in .npmrc are detected automatically: a non-npmjs default registry disables npm checks entirely; scoped overrides (@scope:registry=...) disable checks for that scope.
offline: true forces cache-only operation (never blocks on network).

Workflow:

Ask (or infer from the request) what the user wants changed.
Read the existing .gguard.json if present; merge, don't clobber.
Write the file and show the resulting effective config.
If the user reports false positives on private packages, add allowlist patterns rather than turning the packages verifier off.

One thing to look at

SKILL.md

Grounding Guard Config

Keep looking