Loading npm security reports…
AI PR review assistant. Checks what your AI agent actually changed vs what you asked for. Deterministic, evidence-backed, no AI opinions.
Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
dist/src/init.js: explicit init writes a Git pre-commit hook.
dist/src/init.jsView on unpkgdist/src/init.js: explicit init appends instructions to CLAUDE.md, .cursorrules, and codex.md.
dist/src/init.jsView on unpkgdist/src/telemetry.js: init posts telemetry to overreach-telemetry.overreach.workers.dev.
dist/src/telemetry.jsView on unpkgdist/src/scope/extract_scope.js: user prompt/diff content can be sent to configured LLM providers.
dist/src/scope/extract_scope.jsView on unpkgdist/src/init.js: explicit init writes a Git pre-commit hook.
dist/src/init.jsView on unpkgdist/src/init.js: explicit init appends instructions to CLAUDE.md, .cursorrules, and codex.md.
dist/src/init.jsView on unpkgdist/src/telemetry.js: init posts telemetry to overreach-telemetry.overreach.workers.dev.
dist/src/telemetry.jsView on unpkgdist/src/scope/extract_scope.js: user prompt/diff content can be sent to configured LLM providers.
dist/src/scope/extract_scope.jsView on unpkg