SafeInstall
Intercepts package install commands from AI coding agents, applies policy checks, and blocks or rewrites unsafe installs before execution.
SafeInstall is an open-source, local-first install guard that intercepts package installation commands from AI coding agents before they execute, blocking typosquats, malware releases, and provenance breaks. It targets developers and IT teams using AI coding tools like Claude Code, Codex, and Cursor, and is positioned as a policy-based defense that works at the shell layer, even if the agent is compromised. It is delivered as a CLI tool that hooks into the agent's shell, with a one-command setup and MIT license.
Key features
- Blocks typosquats and malware releases
- Enforces minimum release age policy
- Blocks install scripts (postinstall)
- Rewrites install commands in place
- Hooks into Claude Code, Codex, Cursor
- Tamper-evident trust surface
- One-command init setup
- Local-first, no cloud dependency
- MIT licensed, open source
Social posts
- No social media activity detected
GTM channels
- Docs
- Changelog
ICP
- Software developers
- Engineering teams
- Security teams