phylax - Secure off-chain code and model boundaries
Reviews and hardens off-chain tooling, external-data boundaries, subprocesses, URLs, secrets, dependencies, and model output.
Tags
Updated: 2026-10-19Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Audit off-chain boundaries
- Validate external inputs
- Review subprocess handling
- Restrict fetched hosts
- Check secret handling
- Review dependency pinning
- Constrain model output
- Run proxy conformance proof
Inputs
- Off-chain source code
- TypeScript application code
- Dependency manifests
- Subprocess arguments
- Runtime URLs
- Credentials
- Model output
- Repository checkout
Outputs
- Security review findings
- Boundary validation results
- Model proxy conformance result
Requirements
- Repository access
- Repository-root execution
- Python 3.13.15 for proxy proof
- mise for proxy proof