PatchPilot

Security scanner for vibe coders. Automatically checks npm, pip, and brew packages for vulnerabilities before Claude Code installs them.

How It Works

PatchPilot is a Claude Code pre-execution hook that intercepts install commands:

You: "install lodash for me"
         ↓
Claude: "npm install [email protected]"
         ↓
PatchPilot: Checks OSV database
         ↓
BLOCKED: 4 vulnerabilities found (1 critical, 3 high)

Uses the OSV (Open Source Vulnerabilities) database - the same data source as npm audit.

Installation

npm install -g patchpilot

Add to your Claude Code settings (~/.claude/settings.json):

{
  "hooks": {
    "PreToolUse": [{
      "matcher": "Bash",
      "hooks": [{
        "type": "command",
        "command": "patchpilot",
        "timeout": 10
      }]
    }]
  }
}

Or use npx (no global install):

{
  "hooks": {
    "PreToolUse": [{
      "matcher": "Bash",
      "hooks": [{
        "type": "command",
        "command": "npx patchpilot",
        "timeout": 15
      }]
    }]
  }
}

What It Detects

Package Managers

| Ecosystem | Commands | |-----------|----------| | npm | npm install, npm i, npm add, pnpm install, pnpm add, yarn add, bun add, bun install | | Python | pip install, pip3 install, pipx install, poetry add, uv pip install, python -m pip install | | Homebrew | brew install, brew reinstall, brew upgrade (note: no vulnerability data available) |

Execution Commands

Also detects packages run via:

• npx <package>
• bunx <package>
• npm exec <package>

Bypass Prevention

Detects packages even when hidden behind:

# Command wrappers
sudo npm install evil-pkg
env npm install evil-pkg
timeout 60 npm install evil-pkg

# Command chaining
cd /tmp && npm install evil-pkg
true; pip install evil-pkg

# Nested shells
bash -c "npm install evil-pkg"

# Environment variables
NODE_ENV=production npm install evil-pkg

Decision Logic

| Severity | Action | |----------|--------| | CRITICAL or HIGH | Block - requires manual approval | | MODERATE or LOW | Allow - with warning message | | None found | Allow |

Limitations

• Homebrew: OSV has no vulnerability database for Homebrew packages. Brew commands are detected but not checked.
• Private registries: Only public npm and PyPI packages are checked.
• Offline: Requires internet connection to query OSV API.

Development

# Clone
git clone https://github.com/ProduktEntdecker/patchpilot-cli.git
cd patchpilot-cli

# Install
npm install

# Test
npm test

# Build
npm run build

# Test locally
echo '{"hook_event_name":"PreToolUse","tool_name":"Bash","tool_input":{"command":"npm install lodash"}}' | npx tsx src/index.ts

Contributing

1. Fork the repository
2. Create a feature branch (git checkout -b feature/amazing-feature)
3. Commit your changes (git commit -m 'Add amazing feature')
4. Push to the branch (git push origin feature/amazing-feature)
5. Open a Pull Request

Please report security vulnerabilities privately - see SECURITY.md.

License

MIT - use it however you want.

Credits

• OSV - Open Source Vulnerabilities database by Google
• shell-quote - Shell command parsing