ompsure
Sentinel
/sentinel:package-riskPRO

Package Risk Analysis

Analyzes an installed package's source code for suspicious behavior patterns — eval calls, network requests, environment access, and obfuscation.

What it does

Inspects actual source code, not just metadata
Detects supply chain attack patterns
Supports JS, Python, Rust, and Go ecosystems

What you get by plan

PRO

Supply chain risk scoring from actual package source, not metadata.

  • Eval, exec, and dynamic-require detection
  • Outbound network and env-var access flags
  • Obfuscation and minified-payload signals
  • File:line context per suspicious pattern
  • JS, Python, Rust, Go ecosystems

Other Sentinel skills

/sentinel:assessFREE
Security AssessmentAssesses your project's security surface — detects stack, package managers, security tooling, and integrations. Generates config for ongoing scanning.
/sentinel:scanPRO
Full Security ScanCombines Semgrep static analysis and dependency audit. Writes findings to tasks-plans/tasks.md with severity mapping.
/sentinel:audit-depsFREE
Dependency CVE AuditFocused vulnerability audit. Reports CVEs with installed/fixed versions and exact upgrade commands.
/sentinel:headersFREE
HTTP Security HeadersAnalyzes security headers for a given URL. Context-aware grading based on exploitable risk, not checkbox compliance.

Try it in your terminal

Install free. No credit card required.

Get StartedBack to Sentinel