Show HN: RepoSafety - Audit and isolate untrusted take-home interview repos

Category: security

Tags: security, static-analysis, ai-agent, cursor-plugin, supply-chain

Score: 5.3/10 (Innovation: 6, Technical: 5, Documentation: 5, Utility: 5)

RepoSafety is a Cursor/Claude Code plugin that performs a pre-install security audit of untrusted take-home interview repositories before running npm/pip install. It reads files statically and produces a categorical verdict (safe-to-install, review-first, do-not-install), optionally followed by a Docker-jailed sandbox run. It addresses a real but niche risk in the AI-agent era where candidates and interviewers routinely install arbitrary repos.

Target audience: Backend/frontend developers and hiring engineers reviewing take-home repos, plus AI coding agent users

Repository: https://www.reposafety.com/ · Python

View on Hacker News