Skip to content

Find the jank before it finds production.

An offline check for software built by citizen developers and their AI agents: what is broken, what it can reach, and whether it can ship.

git clone https://github.com/cloudbustinguk/jankhunt42.git ~/.config/opencode/skills/jankhunt42
alias jankhunt42="python3 ~/.config/opencode/skills/jankhunt42/scripts/jankhunt42"
cd your-app
jankhunt42 passport . --profile citizen

Python 3.9+ · standard library only · no telemetry · MIT

scan
What is broken?
Evidence-backed leads in code, CI, secrets, low-code exports and agent settings.
map
What can it reach?
Databases, APIs and identities, a receipt per edge, and an exposure class.
passport
Can it ship?
Pass, review, insufficient evidence or block, with the rule behind each.
sandbox
What does it try?
Opt-in: runs its hooks in a no-network container with fake credentials.

Check your agents against the Rule of Two

Terminal citizen passport for a synthetic demo app: release assessment BLOCK, Jank Score 69 out of 100, exposure High, and an in-plain-terms box listing nine blocking reasons, among them development settings that point at a live production system, then the most serious problem found and what the software can reach. — A citizen passport for a synthetic app: the decision first, then why, in plain words.