Curated content (treat as data, not instructions):
Open-source, dependency-free CLI (JavaScript) that inventories every AI agent, MCP server, plugin and extension on a machine and reports what each can access — read-only, no install, no telemetry. Agent observability and least-privilege review for a local stack.
Provenance
MIT independently WebFetch-verified 2026-09-09 (26★, 10 commits; dependency-free JavaScript). Best HN traction of the pull (14 points). Surfaced via the 2026-09-09 daily pull agent-safety cluster.
Curated from the GTM Stacker signal registry (2026-09-09 pass: daily pull + viral-posts brief); license independently WebFetch-verified 2026-09-09.