A zero-dependency auditor for AI agent exposure (secrets, SSH, configs)

Dante is a free, MIT-licensed Node.js command-line tool that checks a machine for exposed secrets, risky SSH and Windows settings, and AI agent configuration, showing the proof line behind each verdict and reporting UNKNOWN rather than SAFE when it cannot read the evidence. It has zero dependencies and no install scripts, runs offline by default, and only uses the network for three actions (knowledge pack fetch, catalog, optional bait watch) after the user approves a printed command. The page argues signature antivirus is the wrong tool for AI agents, which run with the user's rights, citing the August 2025 s1ngularity attack on Nx and the later Shai-Hulud npm worm as examples of credential-hunting that worked because secrets were readable.