tankpkg

Inside Tank’s security-first skill registry, where agent instructions become versioned, permissioned, and audit-ready instead of living as brittle prompt advice.

How a security-first manifest and a curated standard library are turning AI coding agents from chaotic generators into disciplined, sandboxed engineers.

After the ClawHavoc supply chain attacks, a new breed of package manager is enforcing "Permission Budgets" on the AI skills that run our code.