rulesync
A Utility CLI for AI Coding Agents
No outside reports on file
This tool has very low usage and unverified security practices, so use it only with rule files you completely trust and keep monitoring what changes it makes.
Based on public adoption and transparency signals as of Oct 24, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionNo shell command runner notedLOW
- Network reachLocal or standard API callsLOW
- CredentialsNo API token requiredLOW
- Package sourceGitHub (dyoshikawa/rulesync)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
No npm or PyPI package is listed. Install from source: github.com/dyoshikawa/rulesync ↗
About Rulesync
Rulesync is a command-line tool designed to help AI coding agents sync and manage rules or configurations. It appears to work with rule files to keep settings consistent across projects or environments.
Who it’s for
Developers who use AI coding agents and want to automate rule synchronization. Teams that need to maintain consistent coding standards across multiple projects.
Alternatives
- ESLint / Prettier: Popular code formatting and linting tools for JavaScript projects.
- Pre-commit: A framework for managing git pre-commit hooks to enforce rules.
- EditorConfig: A simple standard for maintaining consistent coding styles across different editors.
- Husky: Tool for running automated checks before code commits.
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README
Why this grade
Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 1.6k
- Listing last refreshed
- 2026-10-27
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Security reports
No reports found for this package in our research (last checked 2026-10-29).
Risks to watch for
- File system access: The tool can read and write files on your computer, potentially modifying project rules or configurations without your immediate notice.
- Rule injection: If rule files come from untrusted sources, an attacker could embed malicious instructions that the AI agent then executes.
- No verification: The tool may not verify that rule files are legitimate before applying them, making it vulnerable to substituted or altered files.
- Limited adoption signals: With zero weekly npm downloads and no visible community use, security issues may not have been discovered or reported yet.
- Silent failures: If rules are synced incorrectly, the AI agent might behave unexpectedly without clear error messages.
How to lower the risk
Least-privilege permissions
- Run the tool in a dedicated directory or sandbox when possible.
- Use read-only rule files until you verify the sync behavior.
Network isolation
- Check if the tool makes any network requests before running it.
- Only download rules from official or known-good sources.
Monitoring
- Review all file changes the tool makes before applying them to production code.
- Keep backups of your rule files so you can quickly revert if needed.
Red flags to watch for
- Rule files that look suspicious or come from unknown sources.
- The tool making changes to files outside its intended rule directories.
- Error messages or crashes that don't provide clear feedback.
Questions
How do I install Rulesync?
Rulesync does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/dyoshikawa/rulesync.
Are there security reports about Rulesync?
No reports found for this package in our research (last checked 2026-10-29). Rulesync currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include file system access, rule injection, no verification.
Is Rulesync actively maintained?
Rulesync has 1.6k GitHub stars. Our directory data was last refreshed on 2026-10-27. Check recent commit activity, release tags, and open issues at github.com/dyoshikawa/rulesync before pinning it in production.
What are alternatives to Rulesync?
Notable alternatives to Rulesync include ESLint / Prettier (Popular code formatting and linting tools for JavaScript projects), Pre-commit (A framework for managing git pre-commit hooks to enforce rules), EditorConfig (A simple standard for maintaining consistent coding styles across different editors), Husky (Tool for running automated checks before code commits). You can also compare Rulesync side by side with other skills in the Related tools section on this page.
README badge and team notes
Maintain or use Rulesync? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/dyoshikawa-rulesync)HTML embed:
<a href="https://agentarmorhq.com/skills/dyoshikawa-rulesync"><img src="https://agentarmorhq.com/api/badge/dyoshikawa-rulesync" alt="AgentArmorHQ Risk Grade for Rulesync" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "dyoshikawa-rulesync"Share with your security lead
Need sign-off to use rulesync? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: rulesync
- **Listing URL:** https://agentarmorhq.com/skills/dyoshikawa-rulesync
- **Type:** AI agent skill
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 1.6k GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Local or standard API calls
- **Credentials:** No API token required
- **Package source:** GitHub (dyoshikawa/rulesync)
#### Recommended Hardened Setup
- **Source Repo:** https://github.com/dyoshikawa/rulesync
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 24, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- AI agent skill
- Publisher
- dyoshikawa
- Source code
- github.com/dyoshikawa/rulesync
- Est. context load
- ~50 tokens idle · ~450 tokens when active (on-demand skill)
- Popularity
- 1.6k GitHub stars
- Last updated
- 2026-10-27
- Last graded
- 2026-10-24
Community
Discussions for Rulesync
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude