# 427 Scan Policies Overview B6e723a9

> Scan Policies Overview

- Skill: `tools-only/427-scan-policies-overview-b6e723a9` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add tools-only/427-scan-policies-overview-b6e723a9`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tools-only/427-scan-policies-overview-b6e723a9/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Productivity
- Author: tools-only (https://skillmd.com/u/tools-only)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/tools-only/427-scan-policies-overview-b6e723a9

---

# Scan Policies Overview

Scan policies define scanner behavior without code changes.

## Which Preset Should I Use?

```mermaid
flowchart TD
    A["What are you scanning?"] --> B{"Untrusted or external skills?"}
    B -- Yes --> C["Use <strong>strict</strong>"]
    B -- No --> D{"Normal CI/CD pipeline?"}
    D -- Yes --> E["Use <strong>balanced</strong> (default)"]
    D -- No --> F{"Trusted internal skills?"}
    F -- Yes --> G["Use <strong>permissive</strong>"]
    F -- No --> E
```

## Built-In Presets

| Preset | Posture | Typical use |
|---|---|---|
| `strict` | Maximum sensitivity | Untrusted content and audits |
| `balanced` | Default blend | General CI usage |
| `permissive` | Lower noise | Trusted internal workflows |

## Quick Start

```bash
skill-scanner scan ./my-skill --policy strict
skill-scanner scan ./my-skill --policy balanced
skill-scanner generate-policy --preset balanced -o my_policy.yaml
```

## Merge Behavior

Custom policy files merge over defaults.

- Missing keys inherit defaults.
- Scalar fields override directly.
- Lists replace defaults (they do not append).

## High-Impact Sections

- `pipeline`: command-chain demotion and known installer handling
- `rule_scoping`: docs/code/scope gating
- `file_limits`: max files, file size, depth
- `analysis_thresholds`: thresholds for analyzability and unicode heuristics
- `severity_overrides`: per-rule severity remapping

## Next Step

For exhaustive knob-by-knob documentation, see [Custom Policy Configuration](custom-policy-configuration.md).