nauta-ai/holster-scan

Local-first scanner for AI-hallucinated / typosquatted (slopsquat) packages + agent boundary preflight — catches what generic SAST misses, before an agent runs or a repo is shared.

2 best points · 0 comments · 1 Hacker News post · 2 GitHub stars · View on GitHub

Hacker News discussions

• Holster-scan – catch AI-hallucinated package imports before agents run (2 points, 0 comments, by davidnauta, 2026-06-10)