Hacker News: adamos486

New comment by adamos486 in "Ask HN: What are you working on? (February 2026)"

adamos486 — Mon, 09 Feb 2026 00:57:07 +0000

Skulto - offline-first package manager for Claude/Codex agent skills

Started building this after getting nervous about installing random SKILL.md files from GitHub. Scans for prompt injection in markdown/references and suspicious patterns in scripts/.

- 200+ curated skills included

- 33 supported agents

- Symlinks for one install anywhere and automatic updates

- CLI, TUI, or MCP interface: try asking Claude to find and add Awesome repos.

- Semantic search across skill content

Working on: local skill authoring, mise-style directory activation

Go + Bubble Tea. Happy to hear what's missing.

New comment by adamos486 in "Show HN: I scan AI agent skills for prompt injection before you install them"

adamos486 — Thu, 29 Jan 2026 16:28:39 +0000

I built this because I was mass copy-pasting skills between Claude Code, Cursor, and Codex. Every agent has its own skills directory, its own format, and no way to sync them.

Skulto: - Installs via symlinks — one source of truth, updates propagate instantly - Security scanner with 35+ patterns (prompt injection, jailbreaks, data exfil) - Offline-first after initial sync, pure-Go binary (no CGO, no libsqlite3) - MCP server so Claude Code can search/install skills without leaving the terminal

The scanner isn't grep-for-bad-words.

200+ curated skills indexed. Supports Claude Code, Cursor, Windsurf, Copilot, Codex, and 25+ others.

Install: brew install asteroid-belt/tap/skulto

Happy to answer questions about the architecture or the security patterns.

Show HN: I scan AI agent skills for prompt injection before you install them

adamos486 — Thu, 29 Jan 2026 14:48:50 +0000

Article URL: https://github.com/asteroid-belt/skulto

Comments URL: https://news.ycombinator.com/item?id=46810899

Points: 1

# Comments: 1

New comment by adamos486 in "Sonos, Squeezed by the Tech Giants, Sues Google"

adamos486 — Tue, 07 Jan 2020 20:57:56 +0000

They are attempting to set precedence with Google before going after Amazon and others. Going against them all at once would likely bankrupt them.