Offline static-analysis rules behind Assurly: npm 12 install-script trust (allowScripts), MCP agent config auditing, slopsquat detection, Supabase RLS, Stripe webhooks, leaked service keys. Runs in Node or the browser.

Defend against slopsquatting — malicious npm packages registered under names AI coding agents commonly hallucinate.

MCP server: the pre-install supply-chain guard for AI coding agents: verify a package exists (catch slopsquat/hallucinations), check vulnerabilities & malware (OSV), detect typosquats, audit a whole dependency list. Deterministic, free, no LLM.

MCP server that verifies an npm package name is real before a coding agent installs it — catching hallucinated ('slopsquat') package names and typosquats of popular packages, with age/downloads trust signals.

Install-time npm guardrail for AI coding agents — a dependency-provenance firewall that blocks malicious packages, slopsquats, and prompt-injection aimed at the agent, before install.

Protect yourself from slopsquatting — AI-hallucinated malicious packages on npm and PyPI

Security scanner built for AI-generated code. Score any JS/TS repo in 40s, catch hallucinated packages, and stop coding agents from shipping vulnerabilities. Free forever.

Pre-deploy ship gate for AI-built SaaS. Audits npm 12 install-script trust (allowScripts), MCP agent config, Supabase RLS, Stripe webhooks and leaked keys — offline, from files you already have. No upload, no sign-up.

MCP server that gives Cursor, Claude Code, VS Code and Windsurf a pre-deploy ship gate. Five tools: scan a path or files, explain a rule, read a hosted verdict, and audit the agent stack itself (MCP config and instruction files).

Verify-before-act safety MCP for AI coding agents: check packages, lockfiles, skill/plugin manifests, and CI workflows before installing or merging.