The install command gets the plugin loaded, but this is what actually makes it enforce anything. It walks you through bootstrapping the contract library tree, installing pre-built rule sets for common MCP servers like github and filesystem (blocks on deleting main branches, .env files, that kind of thing), and running scan to generate starter rules for anything custom you've wired up. The bundled libraries are opinionated, they ship real denies out of the box, and the digest output shows you exactly what just got armed before you flip to enforce mode. If you're running Sponsio as a Claude Code host plugin rather than wiring it into your own agent framework, this is the second half of setup you can't skip.

GitHub stars
476
last updated
Jun 10, 2026

Install

$ npx -y skills add sponsiolabs/sponsio --skill configure --agent claude-code

Installs into .claude/skills of the current project.

Files

sponsio-claude-code — configure the host shield

You are walking the user through configuring the sponsio-claude-code plugin so it actually wraps tool calls in this Claude Code session. Without these steps, the plugin loads but every per-plugin library is empty and every tool call passes through unguarded.

The flow has two halves: setup (steps 1–2, 4–6) covers the common case where the user runs popular MCP servers we ship starters for; scan (step 3) covers plugins / MCP servers without a bundled starter and lives inline because most sessions touch both halves.

Prerequisites (check silently first)

Run:

sponsio --version
  • Not found → tell the user to install: pip install sponsio (or pip install -e ".[all]" from a local clone). Stop here until they confirm.
  • Present → continue.

Sponsors

Details

Repository
github.com/sponsiolabs/sponsio
Categories
Frontend Development, Backend & APIs, Testing & QA, Git & Pull Requests, AI & Agent Building, Release Management
License
Apache-2.0
First seen
Jun 11, 2026

More from sponsiolabs/sponsio

All 2
1srbhr avatardesign-principlessrbhr/Resume-MatcherSwiss International Style for Resume Matcher. Invoke ONLY when designing new UI components or modifying existing component styles.0skills.sh installs
2sunbigfly avatarppt-agentsunbigfly/ppt-agent-skills专业 PPT 演示文稿全流程 AI 生成助手。模拟顶级 PPT 设计公司的完整工作流(需求调研到资料搜集到大纲策划到策划稿到设计稿),输出高质量 HTML 格式演示文稿。当用户提到制作 PPT、做演示文稿、做 slides、做幻灯片、做汇报材料、做培训课件、做路演 deck、做产品介绍页面时触发此技能。即使用户只说"帮0skills.sh installs
3telagod avatarbuilding-agent-systemstelagod/code-abyssAI agent and LLM system engineering reference covering single-agent dev (ReAct, tool calling, plan-execute), multi-agent coordination (swarm, role decomposition0skills.sh installs
4telagod avatardeveloping-mobile-appstelagod/code-abyssMobile development knowledge reference covering iOS (SwiftUI), Android (Jetpack Compose), React Native, and Flutter. Use when building mobile apps, working with0skills.sh installs
5tzachbon avatarHook Developmenttzachbon/smart-ralphHooks let you intercept Claude Code events to validate operations, block dangerous commands, or inject context at key moments like tool...0skills.sh installs
6udecode avatartestingudecode/better-convexHelps you write React hook tests in Bun without the usual foot-guns.0skills.sh installs