Skip to content

v0.15.0

Choose a tag to compare

View all tags
@thebenignhacker thebenignhacker released this 09 Apr 03:38
· 932 commits to main since this release
v0.15.0
6d5f5de

New: hackmyagent check <package> — scan npm packages

hackmyagent check express
hackmyagent check @modelcontextprotocol/server-filesystem
hackmyagent check lodash --json

Registry-first flow

  1. Queries OpenA2A Registry for existing trust data
  2. If fresh (< 3 days), shows registry results instantly
  3. If stale or missing, downloads and runs full HMA+NanoMind analysis
  4. Offers to share results with the community

Also accepts

  • Local paths: hackmyagent check ./my-agent/
  • Skill identifiers: hackmyagent check @publisher/skill

Flags

  • --json — machine-readable output for CI
  • --offline — skip registry, scan locally only
  • --verbose — show all findings (default: top 15)

Scan quality improvements (from 0.14.2)

  • MCP server detection: @modelcontextprotocol/sdk correctly detects as mcp
  • Test file exclusion: __tests__/, *.test.ts no longer produce false AST-GOV findings
  • Project-type filter: web-app checks suppressed for non-web projects
Assets 2
Loading