experimental
hood
Handle unfamiliar software the way you handle unfamiliar chemicals — under a fume hood.
hood is a local enforcement layer for software fetched by developers
and AI agents. It inspects unfamiliar public and private artifacts
before they reach a package manager, installer, or
curl | sh — without changing your workflow and without
sending proprietary packages to a third party. Known-good and known-bad
hashes are fast-pathed; everything else is decomposed by
cleave and classified locally by
Atomdrift Scan. Apache-2.0, no telemetry.
That local pipeline is what lets hood catch attacks nothing has seen before. Rather than matching known-bad signatures, cleave extracts what an artifact can actually do and scores those capabilities against traits refined by cyclotron, our reinforcement-learning training loop. hood is built specifically for the case a feed-based tool can't cover: a previously unseen 0-day supply-chain attack, judged on your own machine at fetch time.
Quiet experimental release
hood is an early build we're putting out quietly to gather real usage. Behavior, flags, and output formats change without notice, and there is no stable release yet. Try it, break it, file issues — just don't wire it into anything you can't unwire. May eat your cat.
How it works
hood creates a fresh certificate authority for each intercepted
command and trusts it only inside that child process — it never
touches the host trust store. Fetched bytes are checked against
known-good and known-bad hashes and PURLs; anything unknown is analyzed
locally with ML and static analysis before it's released to the tool.
Fetching commands fail closed if scanning can't start, while local
operations like go test, cargo build, and
npm test bypass the proxy entirely.
Tool coverage
hood installs user-level shims for supported tools already on your
PATH — no system proxy, no root CA, no package-manager
reconfiguration. It covers curl and wget;
the JavaScript family (npm, npx,
pnpm, yarn, bun, and more);
Python (pip, pipx, uv,
poetry, pdm); go and
cargo; and system package managers including
brew, pacman, dnf,
apk, and rpm. Anything else runs through
hood exec -- <command>.
Install — Rust 1.96+
git clone https://github.com/atomdrift-project/hood.git cd hood make install hood install
Restart your shell and use your tools normally. Set
HOOD_VERBOSE=1 (or -v) for per-artifact
results and a run summary:
✅ Atomdrift Hood scan passed — 3.2% risk score — package.tgz ⚠️ Atomdrift Hood flagged this download as suspicious — 31.0% risk score — BLOCKED 🛑 Atomdrift Hood blocked a high-risk download — 87.0% risk score
Uninstall with hood uninstall; it removes hood's shims
and shell configuration.