Observed arrival · 2026-09-22

Husk Checks What AI Skills Are Hiding

husk.zone Visit website

Editorial interest 84/100 Selection signal · not a rating of the site

A local static scanner for AI-agent skill packages, with file uploads, package scanning, and an optional bring-your-own-key LLM review.

Landing page captured for the 2026-09-22 issue.

For: Developers installing AI-agent skill packages
Worth noticing: The benchmark combines 11,470 confirmed-malicious packages with 4,249 legitimate skills.

Field notes

The page accepts pasted skill text and .md, .py, .js, or .zip uploads, with ZIP archives scanned as packages rather than isolated files. Its default path is offline static analysis, while the optional model review sends material directly from the browser to the selected provider. Husk links its source, PyPI package, and Benchmark.md, and identifies its author as Adam, a first-year CS/Math student in Strasbourg.

Observed signals

Read the marks

Editorial observations of this landing page, not a rating.

○OpenPublic substance visible

✦PrettyNotable craft visible

●ProPolished or operationally mature

◎NicheUnusually specific use

◉HumanPersonal, local, civic, or handmade

One card from the complete issue

The Approximate Buildings of Mississauga

377,241 arrived 1,000 judged 981 catalogued Enter the complete issue