Observed arrival · 2026-11-10
BUFONITE puts a checkpoint in front of AI-agent skills
BUFONITE presents a scanner for GitHub, npm, and MCP skills, with grades and checks that can be used before installation or in CI.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- People reviewing or installing AI-agent skills
- Worth noticing
- The page gives fetch limits of 25 MB, 3,000 files, and 512 KB per file, and says refs are pinned to a commit SHA.
Field notes
The described fetch stage accepts only three named hosts over HTTPS, resolves branches or tags to a commit, and keeps the fetched material in memory. Its stated size and file-count limits make the inspection boundary unusually explicit. The page also distinguishes suspicious patterns from proof of intent: its example says static checks and model review can flag concerns, while the sandbox course is the only one described as able to produce a CLOSED grade.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue