Loading npm security reports…
Wire any project to PetBox (Claude Code, opencode, Factory Droid) — global hooks, MCP configs and skills — with a single npx command, no repo clone.
Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Package source references dynamic require/import behavior.
bin/petbox-wire.jsView on unpkg · L19Source writes installer persistence such as shell profile or service configuration.
src/posix-env.test.tsView on unpkg · L35This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
src/wire.tsView on unpkgPackage source references dynamic require/import behavior.
bin/petbox-wire.jsView on unpkg · L19This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
src/wire.tsView on unpkgSource writes installer persistence such as shell profile or service configuration.
src/posix-env.test.tsView on unpkg · L35