Observed arrival · 2026-10-29
Dante: a watchman for AI-agent reach
A command-line security checker that looks for exposed keys, risky settings, and other places an AI agent—or an intruder—could reach.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- People running AI coding agents on personal machines or servers
- Worth noticing
- Its suggested audit checks npm metadata, unpacks the published package, then searches the source for curl calls; the page reports six locations at the time of writing.
Field notes
The page offers a reproducible package-inspection path: check npm's dependency and script fields, unpack the published archive, then grep the source for calls to curl; it reports six such locations at the time of writing. It describes signed knowledge packs as data rather than executable code and says they can be installed without a network connection; these are project claims, not independently verified here.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue