SSS_PROTOCOL_ACTIVE
REFERENCE_IMPLEMENTATION: v4.2.2
SITEMAP

AgentSkin

01 / INTEGRITY

How do I know this won't delete important data?

Unlike LLM-based summarization, AgentSkin is Deterministic Code. It uses an explicit whitelist strategy. If a key is requested in the signals array, the recursive engine is physically incapable of omitting it. By utilizing aliases, you ensure that even inconsistent nomenclature is mapped correctly to your agent's internal schema. It is as safe as a SQL SELECT statement.

02 / NECESSITY

Modern LLMs have 2M+ context windows. Why do I need this?

A context window is a bucket; AgentSkin is a filter. Just because a model can read 2 million tokens doesn't mean it should. "Perceptual Drag" occurs when an LLM allocates attention heads to structural noise (JSON brackets, redundant IDs, ads). By pruning this noise, you free up the model's "IQ" to focus on reasoning. Users typically see a 30-40% increase in reasoning accuracy on complex data sets.

03 / PERFORMANCE

What specific improvements will I see?

Operating costs drop by 66-86% for typical API responses. Token savings vary based on data structure and signal specificity.

04 / SOVEREIGNTY

Why use the local reference server?

Running npx agentskin ensures Self-Sovereign Perception. Your private session cookies, local network data, and API keys never leave your host machine. Perception and pruning happen locally, ensuring absolute privacy and zero-latency execution.

05 / SECURITY

What protections prevent malicious URLs?

The reference implementation includes enterprise-grade security measures:

  • SSRF Protection: Blocks private network ranges (127.x, 10.x, 172.16-31.x, 192.168.x, 169.254.x) and IPv6 variants
  • Cloud Metadata Blocking: Prevents access to GCP, Azure, and Kubernetes metadata services
  • Rate Limiting: 30 requests/minute per client prevents abuse
  • Input Validation: Zod schemas validate all tool inputs with type coercion
  • URL Sanitization: javascript: and data: URL schemes blocked from HTML extraction
  • Resource Limits: 30-second timeout prevents resource exhaustion

All security features are open-source and include 77 tests for continuous validation.

GitHub Repository

-> source code

Install MCP Server

-> npm registry