Loading npm security reports…
Qatrolabs engineering harness: scaffold and operate Spec-Driven-Development projects for AI coding tools
Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Package ships non-JavaScript build or shell helper files.
scripts/verify-state.shView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
templates/stacks/python-cli/tests/test_smoke.pyView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
cli/src/lib/agentRunner.jsView on unpkgPackage ships non-JavaScript build or shell helper files.
scripts/verify-state.shView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
templates/stacks/python-cli/tests/test_smoke.pyView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
cli/src/lib/agentRunner.jsView on unpkg