Rescan · anizum1 bundle Audit an untrusted third-party repository for malware, backdoors, and misrepresentation BEFORE installing, building, or running it. Use this whenever the user pastes clone-and-install instructions and asks whether it is safe, asks you to "check this repo," "look for anything malicious," "see if there are bugs or backdoors," vet a dependency or a fork, or review code they found on GitHub/npm/PyPI and are about to run. Trigger even when the user frames it casually ("is this legit?", "should I install this?") or asks only about bugs — the install step is the risk, and it is worth checking before they run it. Do NOT use for reviewing the user's own code or diffs; that is code-review.
