AI can write. Trace can read. Open-source static analyzer for the 24 failure patterns that only AI writes.

25 production-tested defensive security skills for Claude Code - WordPress, VPS, Cloudflare, Next.js hardening, AI agent guardrails, MCP security, prompt injection defense, OWASP LLM Top 10, LLM coding failure modes (slopsquatting, hallucinated APIs, sycophancy), incident response, GDPR/DACH compliance. MIT, battle-tested.

Scan markdown and config files for hallucinated npm package names. Defends against slopsquatting supply chain attacks.

👻 Stop installing packages that don't exist. When AI hallucinates names like "flask-gpt-helper", attackers register them as malware. Phantom Guard detects slopsquatting attacks across PyPI, npm & crates.io before you install.

Detect slopsquatting attacks — AI-hallucinated packages in your dependencies. Rust CLI + GitHub Action.

Block AI-hallucinated and slopsquatted npm/pip packages before they install. Pre-tool-use hook for Claude Code, by UNPWNED.

DepScope — Package Intelligence for AI Agents. 22 MCP tools, 19 ecosystems, free, no auth. https://depscope.dev

Package intelligence MCP server. Stops AI agents from installing hallucinated/malicious packages across 19 ecosystems. 22 tools, free, no auth.

Detect hallucinated (non-existent) packages in AI-generated code

Public corpus of LLM-hallucinated package names observed in production AI coding agent traffic across 19 ecosystems. Updated daily. CC-BY-NC-SA 4.0.

Generate Rust function bodies at compile time with a proc macro that retries on errors until the code compiles or stops attempting

Detect slopsquatting attacks by scanning dependencies for AI-hallucinated packages using a trust model trained on real attack data.