|
Codebase Archaeologist: Check a GitHub repo before you run it.
Codebase Archaeologist gives public GitHub repos a careful pre-install repo check: risky install scripts, agent surfaces, MCP/tool access, suspicious pattern...
|
83 % |
|
CipherBond — local-first data protection for AI
CipherBond pseudonymizes credentials, PII, and proprietary code before your prompts leave the device, swapping them for coherent stand-ins and restoring the...
|
80 % |
|
EquipmentShare
Ship agents fast
|
80 % |
|
Longxia — Static security scans for AI agent skills
Inspect public GitHub agent skills for risky instructions, scripts, permissions, and supply-chain behavior before installation.
|
80 % |
|
DepWall — npm install guardrail & supply-chain firewall for AI agents
DepWall is an install-time guardrail for AI coding agents: it inspects every npm package before it installs — slopsquatting, poisoned lockfiles, and prompt-i...
|
80 % |
|
repyy | A closer look before you run
Inspect take-home assignments before installing dependencies, starting the project or opening it in your IDE. Repyy reports risks and limitations.
|
80 % |
|
TPA.run — TPA.run
|
80 % |
|
npryx: see what a package does before npx runs it
npryx is a drop-in for npx that shows you what a package will do before it runs: install scripts, provenance, publish age, downloads, lookalike names and int...
|
80 % |
|
Hope is not a dependency strategy. | LimeTip
LimeTip builds Tapid for controlled, inspectable package installation.
|
79 % |
|
metahub · the open ecosystem for AI tools
metahub is building open infrastructure for AI tools: a registry that installs anywhere, an open-source eval framework, and an ecosystem built in public.
|
79 % |
|
compliantAI - know what an agent extension does before you install it
Capability audits for 288 Claude Code plugins, skills, agents and MCP servers. Hooks, code execution, hidden context injection and install method, read from...
|
79 % |
|
RepoPreflight — Know before you clone
Check repository trust, execution risk, AI-agent risk and supply-chain signals before opening a Git repo.
|
79 % |
|
Etiquette — Documentation
Etiquette: local-first governance for agent-assisted engineering. Seats, task envelopes, receipts, and promotion gates — your repo is the ledger.
|
79 % |
|
Lazaretto: Know what a package does before you install it.
Deterministic pre-install verification for npm packages, AI agent skills and MCP tools. The free lockfile check matches every exactly pinned dependency again...
|
79 % |
|
Footon
Footon lets agents share a safe, reviewed version of a thread or transcript.
|
79 % |
|
Ploinky Documentation
|
78 % |
|
alint: a language-agnostic linter for repository files
alint is a linter for repository files: a README in every package, pinned workflow actions, no committed .env. One .alint.yml, in CI and your editor.
|
78 % |
|
Prüfstein · ISO 27001 device compliance without spying on your team.
Prüfstein checks every employee Mac against your ISO 27001 controls. Nothing runs in the background, nothing is filed until the person says so, and the fleet...
|
78 % |
|
Trojaino — Inspect before you install | Blockhouse Software
A local, deterministic install gate for AI tools and downloaded software. Scan first. Review the evidence. Then decide what runs.
|
78 % |
|
Pægents — Zero-Trust AI Agent Payment Infrastructure
AI agent payment infrastructure: stablecoin escrow, cryptographic receipts, spending controls, and metered proxy for autonomous agent-to-agent commerce on Base.
|
78 % |
Detected social media networks