v0.1.2

The SDK, CLI and starter agent now default to the official domain, https://adyros.com. ADYROS_SITE_URL and --site still point them anywhere else.

npm i -g https://github.com/ADYROS/adyros-sdk/releases/download/v0.1.2/adyros-0.1.2.tgz

v0.1.1

Adds the starter agent: what a new Adyros machine runs when you pick the Starter agent template.

npx github:ADYROS/adyros-sdk demo          # inside an Adyros machine
npm i -g https://github.com/ADYROS/adyros-sdk/releases/download/v0.1.1/adyros-0.1.1.tgz   # no git needed

In order, it:

1. logs its start to the machine's Proof-of-Behavior chain,
2. reads its guarded wallet and spending policy,
3. tries an unlimited token approval, which the guard refuses (and logs),
4. scans a clean and a malicious sample skill,
5. checks an ERC-8004 agent before paying it,
6. keeps a heartbeat on the log.

It never spends funds. runDemo() is exported so you can start from it in your own agent.

The attached adyros-0.1.1.tgz is the built package, installable without git.

v0.1.0

First release of the Adyros SDK and CLI.

Install

npm install github:ADYROS/adyros-sdk
npx github:ADYROS/adyros-sdk scan ./my-skill

What's inside

• Skill Scanner: static rules for key theft, exfiltration, remote code, miners, wallet drains, prompt injection, obfuscation and persistence. Verdicts clean, review or blocked; adyros scan exits 2 when blocked, so it can gate CI.
• Proof of Behavior: canonical JSON, sha256 hash chain, Merkle roots, and verification of a public log against its Base anchors.
• x402 client: pays exact requirements with EIP-3009 transferWithAuthorization (USDC on Base), with a spending cap.
• Adyros client: machine log, guarded wallet (get, send), free and paid Agent Check for ERC-8004 agents.
• CLI: adyros scan, adyros check, adyros proof, with --json and --site.
• Examples: a GitHub Actions gate for skills, sample clean and malicious skills, checking an agent before paying it, and in-machine logging.

Tested on Node 20 and 22. MIT licensed.