ai-rulez

Standards-compliant lifecycle tool for agent knowledge and capabilities. Author rules, skills, agents and MCP servers once; generate for 52 harnesses; bundle as OKF, Agent Plugins and ARD; validate against each standard; govern with signing, approvals and

Latest 5.3.0

NPM

82%

Total Score

healthy

Active development and strong release hygiene outweigh the risk of nearly all recent commits coming from one contributor.

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factor

Although two maintainers were active, one made 99.86% of recent commits, leaving the project exposed to concentrated maintenance capacity.

Workflow audit

All seven workflows were analyzed, all 97 action references are pinned, and four workflows use read-only permissions. Two low-confidence cache-poisoning findings and one low-confidence GITHUB_PATH finding are hygiene concerns, but they do not show an untrusted trigger or execution sink.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10237 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. ai-rulez is vulnerable to Resource Leakage in versions 3.0.0 - 3.7.1.	3.0.0 - 3.7.1	Medium