security-inspection — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited security-inspection (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
@weave_protocol/hundredmen intercepts MCP tool calls, analyzes them, and decides whether to allow, block, or require approval. v1.1.0 adds enforcement of WARD.md policies at the interception layer.
When a tool call hits Hundredmen, the checks run in this order:
WARD.mdrequire_approvalWARD is the first gate. A WARD deny short-circuits everything else.
hundredmen_load_ward({ path? }) — load a WARD.md (auto-loads ./WARD.md on startup)hundredmen_show_ward() — show currently active policyhundredmen_check_ward({ tool, args }) — dry-run a tool call against the policyhundredmen_unload_ward() — disable WARD enforcementhundredmen_create_session({ agent_id? })hundredmen_declare_intent({ session_id, intent })hundredmen_diff_intent({ session_id })hundredmen_get_live_feed({ since?, limit? })hundredmen_get_pending() / hundredmen_approve_call / hundredmen_block_callhundredmen_check_reputation({ server_id })hundredmen_get_stats() / hundredmen_get_server_stats({ server_id })| User says | Action |
|---|---|
| "Set up monitoring for my agent" | hundredmen_create_session + hundredmen_declare_intent |
| "What is my agent doing right now" | hundredmen_get_live_feed |
| "Why was this call blocked" | hundredmen_show_ward + check live feed for the blocked call |
| "Will my WARD block X" | hundredmen_check_ward({ tool: 'X', args: {...} }) |
| "I want WARD enforcement on" | hundredmen_load_ward() (loads from CWD or env) |
| "This server seems off" | hundredmen_check_reputation + hundredmen_report_suspicious |
@weave_protocol/ward — the policy format Hundredmen enforces@weave_protocol/mund — input-level threat scanning (complementary to interception)@weave_protocol/domere — attests to the policy decisions for compliance proofs@weave_protocol/witan — consensus on high-stakes blockshundredmen_declare_intent + hundredmen_diff_intent.hundredmen_declare_intent, drift detection can't work.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.