USB+ open-sources a trust layer for inspecting agent skills and MCP servers before install
peepsick · reddit · 2026-11-10
Frustrated that installing skills, tools, and MCP servers into agent workflows is trivially easy while understanding what you're installing is not, a developer open-sourced USB+ (Universal Systems Bridge), a trust layer between agents and their tools. It ships skill discovery and capability inspection, claim verification against actual repo contents, MCP server probing, a scanner and CLI installer, and a validation test corpus. The author stresses it doesn't guarantee safety — the goal is visibility before granting external tools access — and asks how others inspect skills and MCP servers today.
More from coding & agent
- LLM agent directly controls bimanual robot arms: same model plays Minecraft and writes PyTorch — k7agar · 2026-11-10
- Agent swarm experiment: prompt name order and model choice decide who leads — bibryam · 2026-11-10
- Botzskool MCP server lets your AI agent loose on a virtual playground — EnvironmentalRice348 · 2026-11-10
- Your agent is slow — tracing shows the model usually isn't the bottleneck — aureliatech · 2026-11-10
- OpenCode v2.2.7 ships GitHub Copilot Auto routing, tab shortcuts and SDK breaking changes — github-actions[bot] · 2026-11-10
- Skills vs linked docs: where should AI agents' knowledge live? — IllustriousFault6218 · 2026-11-10