Loading npm security reports…
AI coding agent harness and local dashboard for Claude Code, OpenAI Codex, Google Antigravity, and GitHub Copilot - setup audits, guardrails, structured skills, deny hooks, and persistent learning loops.
Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Package source references a known benign dynamic code generation pattern.
dist/dashboard/alpine.jsView on unpkg · L4Package source references dynamic require/import behavior.
scripts/warn-node-pty.mjsView on unpkg · L5Package ships non-JavaScript build or shell helper files.
workflow/install-goat-flow.shView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli/server/terminal.jsView on unpkgPackage source references a known benign dynamic code generation pattern.
dist/dashboard/alpine.jsView on unpkg · L4Package ships non-JavaScript build or shell helper files.
workflow/install-goat-flow.shView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli/server/terminal.jsView on unpkgPackage source references dynamic require/import behavior.
scripts/warn-node-pty.mjsView on unpkg · L5