[nadav-dvir]

Summary

On Windows, the skill-governance hooks never ran: they were POSIX one-liners (${VAR:-…}, $(( ))), and Cursor runs hooks in the platform's default shell, so skills were allowed unchecked. This PR runs them through the shared launcher that JFrog agent hooks now vendors into plugins/jfrog/modules/core/enforce-skill.mjs (synced in #115 and #117). The hook is a single node command with a path relative to the plugin root, like the existing sessionStart hooks.

The launcher sets the same deadline (now + 25s) and fetch bounds, and passes Agent Guard's exit 0 and 2 through. On any other failure it answers {} with exit 0 and writes [jfrog-agent-guard] skill governance did not run (<cause>); this skill was not governed. to stderr, which Cursor keeps in its hook output log.

Changes

• plugins/jfrog/hooks/hooks.json: beforeSubmitPrompt and preToolUse (Read) run node "./modules/core/enforce-skill.mjs" --client cursor, and preToolUse adds --prefer-offline as before. failClosed: false and the timeouts are unchanged.
• scripts/validate-skill-governance.mjs:
  • Expect the launcher command with no shell syntax.
  • Check the deadline and fetch bounds on what the stub npx receives.
  • Require {} with exit 0 and the stderr cause on fail-open.
  • Drop the date(1) degrade check, because the clock is now read in node.
  • runHook now runs from the plugin root, which the relative path needs.
• README: replace the "POSIX shell required" note.
• Bump to 0.6.20.

MLAI-1310 payload delivery

All of the pipeline checks still pass:

• every hook command is valid sh;
• no command has a top-level ;, && or ||;
• the payload reaches Agent Guard intact through Cursor's printf %s '<b64>' | base64 -d | <command> under sh, bash and zsh.

The launcher reads the payload from its stdin, which is that pipeline.

Not verified here: how Cursor on Windows delivers the payload. The pipeline above is the macOS and Linux path. Before merging, please run one governed skill on a Windows Cursor install and confirm it gets a verdict.

Testing

• node scripts/validate-skill-governance.mjs: all 38 checks pass.
  • Run against the old hooks.json, 8 checks fail.
• node scripts/validate-template.mjs passes.
• node --test plugins/jfrog/scripts/*.test.mjs: 53 pass.

🤖 Generated with Claude Code