Loading npm security reports…
Claude Code and Codex harness with rules, skills, agents, hooks, and verification gates.
Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Package source references dynamic require/import behavior.
bin/claude-everything-workflow.jsView on unpkg · L3Package source references weak cryptographic algorithms.
scripts/learning/project-utils.jsView on unpkg · L11Package ships non-JavaScript build or shell helper files.
scripts/install.shView on unpkgHardcoded password in references/agents/security-reviewer.md
references/agents/security-reviewer.mdView on unpkg · L186Package source references dynamic require/import behavior.
bin/claude-everything-workflow.jsView on unpkg · L3Package ships non-JavaScript build or shell helper files.
scripts/install.shView on unpkgPackage source references weak cryptographic algorithms.
scripts/learning/project-utils.jsView on unpkg · L11Hardcoded password in references/agents/security-reviewer.md
references/agents/security-reviewer.mdView on unpkg · L186