if (result.blocked) throw new Error(Blocked by ${skill.name})

TL;DR

Implement a Skill Hook system to automatically invoke registered skills before and after tool execution, enabling security checks and other features.

Guidance

• Introduce a getSkillsForHook function to retrieve relevant skills for the 'tool:before-execute' and 'tool:after-execute' hooks.
• Register skills like bash-security with the Skill Hook system, specifying the event and filter conditions, such as tool.name === 'exec'.
• Modify the executeTool function to call the pre-execution and post-execution hooks, passing the tool and input as arguments.
• Handle the results of the skill checks, throwing an error if a skill blocks the execution.

Example

async function executeTool(tool, input) {
  // Pre-execution Hook
  for (const skill of getSkillsForHook('tool:before-execute')) {
    const result = await skill.check(tool, input)
    if (result.blocked) throw new Error(`Blocked by ${skill.name}`)
  }
  // Execute tool
  const result = await tool.execute(input)
  // Post-execution Hook
  for (const skill of getSkillsForHook('tool:after-execute')) {
    await skill.onComplete(tool, result)
  }
  return result
}

Notes

The proposed solution assumes that the getSkillsForHook function and the skill registration mechanism are already implemented. Additional work may be required to integrate the Skill Hook system with the existing tool execution pipeline.

Recommendation

Apply the proposed Skill Hook system to enable automatic security checks and other features, as it provides a flexible and extensible way to intercept tool execution.