@topaisaas/agentpr-guard
v1.0.2
Published
Deterministic Pull Request auditor for AI-generated code. Detects hallucinated npm/pypi dependencies, architectural boundary breaches, and excessive AI slop in CI/CD.
Maintainers
Readme
@topaisaas/agentpr-guard
Deterministic Pull Request & Git Hook Auditor for AI-Generated Code (Claude Code, Cursor, Windsurf, Devin).
Air-gapped, zero external network telemetry, verified offline via Ed25519.
⚡ The Pain Point
AI coding assistants generate dozens of Pull Requests every day. However, they frequently:
- Hallucinate synthetic npm/pypi dependencies that do not exist or are malicious typosquatting packages.
- Break architectural boundaries (e.g., frontend components importing backend database drivers or Node built-ins).
- Leak hardcoded tokens or generate bloated unfulfilled placeholder boilerplate.
agentpr-guard runs in under 150 milliseconds locally or in GitHub Actions, audits the git diff deterministically, and posts a clean verification report to your PR.
🚀 Instant Usage
1. In Local Git Pre-Commit Hook
npx -y @topaisaas/agentpr-guard pre-commit --fail-on-reject2. In GitHub Actions CI
- name: Audit AI Pull Request
uses: topaisaas-dev/agentpr-guard@v1
with:
fail_on_reject: 'true'3. Direct CLI Analysis
git diff origin/main...HEAD | npx -y @topaisaas/agentpr-guard audit --markdown🛡️ Offline Ed25519 Commercial Licensing
- Community Free Tier: Up to 3 PR audits per day.
- Team Pro / Enterprise: Unlimited audits in high-throughput CI/CD pipelines.
- Instant 1-Click Unblock: Purchase License on Polar.sh ($39/month).
- Emergency Production Hotfix Bypass: Append
--emergency-pass-24hto bypass paywalls for 24 hours during critical hotfixes.
📄 License
Apache-2.0. Copyright (c) 2026 TopAI Sovereign Studio.
