project

AgentWarden

Open-source command-line tool and GitHub Action that statically scans AI agent skill files and MCP server configurations, records reviewed content with SHA-256 digests in a lockfile, and verifies publisher signatures. Distributed on npm as agentwarden-cli.

Known aliases

AgentWarden CLI
agentwarden-cli
AgentWarden Security Gate

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 publisher

A skills.lock file puts Agent Skills behind the same digest check as an npm dependency

AgentWarden scans Markdown skills and MCP configs, exits non-zero on a rule match, and records a SHA-256 in skills.lock. It is also the project whose post documents the missing lockfile.

Publishers:dev.to

Reality

Evidence38
Adoption8
Hype gap+10
Incentives70
Confidence45