Packages & skills

Every npm and PyPI package your agents installed or ran (npm/pnpm/yarn/bun add, npx, dlx, pip, uvx) and every skill, plugin or custom agent they gained — each checked before use.

Check a package

Registry metadata, known-malicious and vulnerable versions (OSV), typosquats, publish age, install scripts, publisher changes and registry signatures

Packages

What was checked, the verdict, and where each package was used

Skills, plugins and custom agents

Instructions your agent will follow. Each file is scanned when it is written or appears on disk.