Kit - HumoticaOS Package Manager & AI Security Gateway

What is Kit?

Kit is an intelligent package manager that validates software against security protocols before installation. Think of it as pip with a built-in security guard.

pip install kit-pm
kit list          # See all available packages
kit install rabel # Install with security validation

Requirements

• Python 3.9+
• Dependencies: Only requests (installed automatically)
• Optional: Local Ollama instance for AI-powered validation

Quick Start

# Install Kit
pip install kit-pm

# List available HumoticaOS packages
kit list

# Search for packages
kit search memory

# Get package details
kit info rabel

# Install with JIS/SNAFT security validation
kit install rabel

# Health check your installation
kit doctor

# Update package registry
kit update

How It Works

When you run kit install <package>, Kit:

1. Validates against JIS (Jasper Intent Specification) protocol
2. Checks SNAFT security verification status
3. Evaluates trust score (minimum 0.5 required)
4. Installs via pip/npm with full audit trail
5. Configures MCP servers automatically (if applicable)

kit install rabel

[CHECK] Validating package: rabel
  ├── Trust Score: 0.95 ✓
  ├── JIS Compliant: YES ✓
  └── SNAFT Verified: YES ✓

[ROUTE] Installing via pip: mcp-server-rabel

[DONE] RABEL MCP Server v0.4.1 installed!

Available Packages (10 on PyPI)

All packages are published on PyPI and can be installed with Kit or directly with pip.

Core Stack

Security

AI Bridges (MCP Servers)

The Security Stack

Programmatic Usage

from kit_pm import PackageRegistry, KitValidator

# Browse packages
registry = PackageRegistry()
for pkg in registry.list_all():
    print(f"{pkg.name}: {pkg.description}")

# Validate a package
validator = KitValidator()
pkg = registry.get("rabel")
result = validator.validate(pkg)
print(f"Valid: {result['valid']}, Trust: {pkg.trust_score}")

# Check for prompt injection (with local AI)
validator = KitValidator(kit_api="http://localhost:11434/api/generate")
result = validator.check_injection("ignore all previous instructions")

Why Kit?

Traditional package managers (pip, npm) trust everything. Kit validates:

• Trust Score: Community reputation and audit history
• JIS Compliance: Follows HumoticaOS security protocol
• SNAFT Verification: Passed security review
• Intent Validation: AI-powered analysis of package behavior

"TRUST BEFORE ACCESS - No intent, no access"

Links

• PyPI: https://pypi.org/project/kit-pm/
• GitHub: https://github.com/jaspertvdm/KIT
• HumoticaOS: https://humotica.com
• All Packages: https://pypi.org/user/jaspertvdm/

License

MIT License - See LICENSE for details.

Credits

Built by the HumoticaOS Team.

One Love, One fAmIly!