
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
Context middleware for AI agents: prune API and JSON responses and compact CLI output before it enters model context.
Context middleware for AI agents. AgentSkin removes low-value API, JSON, and terminal noise before it enters model context.
AgentSkin has three primary workflows:
compress — one front door that auto-detects JSON, CLI output, or plain text.fetch_optimized_data — fetches a public URL and applies URL-specific pruning rules when available.reduce — compacts terminal output using Tokenjuice's rule-driven reducers.Five advanced tools remain for compatibility and diagnostics: apply_json_semantic, classify_url, strip_ansi, estimate_tokens, and skin_reasoning.
npx -y agentskin@latest
MCP config:
{
"mcpServers": {
"agentskin": {
"command": "npx",
"args": ["-y", "agentskin@latest"]
}
}
}
Fidelity first, compression second. Explicit signals and URL rules are authoritative. Generic keys such as id, name, and url are only fallback signals when no explicit rule exists.
A reduction is useful only when the information required by the task survives it.
The release gate runs the AgentSkin-owned test suite, including MCP startup/security and live HTTP integration tests. Run it with:
npm ci
npm test
Benchmarks are workload-specific. The test suite prints measured reductions for its fixtures instead of claiming one universal savings percentage.
This directory is the npm package root.
npm ci
npm test
npm run lint
npm pack --dry-run
AgentSkin semantic pruning and MCP integration: Shawn Nichols Sr. / Nichols Transco LLC.
CLI reduction uses Tokenjuice by Vincent Koc under its MIT license.
FAQs
Context middleware for AI agents: prune API and JSON responses and compact CLI output before it enters model context.
The npm package agentskin receives a total of 150 weekly downloads. As such, agentskin popularity was classified as not popular.
We found that agentskin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.