cursor-tools
Advanced tools
cursor-tools is optimized for Cursor Composer Agent but it can be used by any coding agent that can execute commands
After installation, to see AI teamwork in action just ask Cursor Composer to use Perplexity or Gemini. Here are two examples:
cursor-tools provides a CLI that your AI agent can use to expand its capabilities. cursor-tools is designed to be installed globally, providing system-wide access to its powerful features. When you run cursor-tools install we automatically add a prompt section to your Cursor project rules. During installation, you can choose between:
.cursor/rules/cursor-tools.mdc file (recommended).cursorrules file (for backward compatibility)You can also control this using the USE_LEGACY_CURSORRULES environment variable:
USE_LEGACY_CURSORRULES=true - Use legacy .cursorrules fileUSE_LEGACY_CURSORRULES=false - Use new .cursor/rules/cursor-tools.mdc filecursor-tools requires a Perplexity API key and a Google AI API key.
cursor-tools is a node package that should be installed globally.
Install cursor-tools globally:
npm install -g cursor-tools
Then run the interactive setup:
cursor-tools install .
This command will:
.cursor/rules/cursor-tools.mdc or existing .cursorrules)npm install --global playwright)act, extract, and observe commands)cursor-tools uses Gemini-2.0 because it is the only good LLM with a context window that goes up to 2 million tokens - enough to handle and entire codebase in one shot. Gemini 2.0 experimental models that we use by default are currently free to use on Google and you need a Google Cloud project to create an API key.
cursor-tools uses Perplexity because Perplexity has the best web search api and indexes and it does not hallucinate. Perplexity Pro users can get an API key with their pro account and recieve $5/month of free credits (at time of writing). Support for Google search grounding is coming soon but so far testing has shown it still frequently hallucinates things like APIs and libraries that don't exist.
If you do something cool with cursor-tools please let me know on twitter or make a PR to add to this section!
To see cursor-tools GitHub and Perplexity skills: Check out this example issue that was solved using Cursor agent and cursor-tools
See cursor get approximately 5x more work done per-prompt with Gemini code review:
Use Cursor Composer in agent mode with command execution (not sure what this means, see section below on Cursor Agent configuration). If you have installed the cursor-tools prompt to your .cursorrules (or equivalent) just ask your AI coding agent/assistant to use "cursor-tools" to do things.
cursor-tools ask allows direct querying of any model from any provider. It's best for simple questions where you want to use a specific model or compare responses from different models.cursor-tools web uses an AI teammate with web search capability to answer questions. web is best for finding up-to-date information from the web that is not specific to the repository such as how to use a library to search for known issues and error messages or to get suggestions on how to do something. Web is a teammate who knows tons of stuff and is always up to date.cursor-tools repo uses an AI teammate with large context window capability to answer questions. repo sends the entire repo as context so it is ideal for questions about how things work or where to find something, it is also great for code review, debugging and planning. is a teammate who knows the entire codebase inside out and understands how everything works together.cursor-tools plan uses an AI teammate with reasoning capability to plan complex tasks. Plan uses a two step process. First it does a whole repo search with a large context window model to find relevant files. Then it sends only those files as context to a thinking model to generate a plan it is great for planning complex tasks and for debugging and refactoring. Plan is a teammate who is really smart on a well defined problem, although doesn't consider the bigger picture.cursor-tools doc uses an AI teammate with large context window capability to generate documentation for local or github hosted repositories by sending the entire repo as context. doc can be given precise documentation tasks or can be asked to generate complete docs from scratch it is great for generating docs updates or for generating local documentation for a libary or API that you use! Doc is a teammate who is great at summarising and explaining code, in this repo or in any other repo!cursor-tools browser uses an AI teammate with browser control (aka operator) capability to operate web browsers. browser can operate in a hidden (headless) mode to invisibly test and debug web apps or it can be used to connect to an existing browser session to interactively share your browser with Cursor agent it is great for testing and debugging web apps and for carrying out any task that can be done in a browser such as reading information from a bug ticket or even filling out a form. Browser is a teammate who can help you test and debug web apps, and can share control of your browser to perform small browser-based tasks.Note: For repo, doc and plan commands the repository content that is sent as context can be reduced by filtering out files in a .repomixignore file.
When using cursor-tools with Cursor Composer, you can use these nicknames:
cursor-tools repocursor-tools webcursor-tools browser"Please implement country specific stripe payment pages for the USA, UK, France and Germany. Use cursor-tools web to check the available stripe payment methods in each country."
Note: in most cases you can say "ask Perplexity" instead of "use cursor-tools web" and it will work the same.
"Let's refactor our User class to allow multiple email aliases per user. Use cursor-tools repo to ask for a plan including a list of all files that need to be changed."
Note: in most cases you can say "ask Gemini" instead of "use cursor-tools repo" and it will work the same.
"Use cursor-tools to generate documentation for the Github repo https://github.com/kait-http/kaito" and write it to docs/kaito.md"
Note: in most cases you can say "generate documentation" instead of "use cursor-tools doc" and it will work the same.
"Use cursor-tools github to fetch issue 123 and suggest a solution to the user's problem"
"Use cursor-tools github to fetch PR 321 and see if you can fix Andy's latest comment"
Note: in most cases you can say "fetch issue 123" or "fetch PR 321" instead of "use cursor-tools github" and it will work the same.
"Use cursor-tools to open the users page and check the error in the console logs, fix it"
"Use cursor-tools to test the form field validation logic. Take screenshots of each state"
"Use cursor-tools to open https://example.com/foo the and check the error in the network logs, what could be causing it?"
Note: in most cases you can say "Use Stagehand" instead of "use cursor-tools" and it will work the same.
"Use cursor-tools ask to compare how different models answer this question: 'What are the key differences between REST and GraphQL?'"
"Ask OpenAI's o3-mini model to explain the concept of dependency injection."
Note: The ask command requires both --provider and --model parameters to be specified. This command is generally less useful than other commands like repo or plan because it does not include any context from your codebase or repository.
cursor-tools requires API keys for Perplexity AI, Google Gemini, and optionally for OpenAI, Anthropic and OpenRouter. These can be configured in two ways:
cursor-tools install and follow the prompts~/.cursor-tools/.env in your home directory or .cursor-tools.env in your project root:
PERPLEXITY_API_KEY="your-perplexity-api-key"
GEMINI_API_KEY="your-gemini-api-key"
OPENAI_API_KEY="your-openai-api-key" # Optional, for Stagehand
ANTHROPIC_API_KEY="your-anthropic-api-key" # Optional, for Stagehand and MCP
OPENROUTER_API_KEY="your-openrouter-api-key" # Optional, for MCP
GITHUB_TOKEN="your-github-token" # Optional, for enhanced GitHub access
ANTHROPIC_API_KEY and OPENROUTER_API_KEY must be provided to use the mcp commands.cursor-tools supports multiple authentication methods for accessing the Google Gemini API, providing flexibility for different environments and security requirements. You can choose from the following methods:
API Key (Default)
GEMINI_API_KEY environment variable to your API key string obtained from Google AI Studio.GEMINI_API_KEY="your-api-key-here"
Service Account JSON Key File
GEMINI_API_KEY environment variable to the path of your downloaded service account JSON key file.GEMINI_API_KEY="./path/to/service-account.json"
gemini-2.0-flash.Application Default Credentials (ADC) (Recommended for Google Cloud Environments)
cursor-tools within Google Cloud environments (e.g., Compute Engine, Kubernetes Engine) or for local development using gcloud.GEMINI_API_KEY environment variable to adc.GEMINI_API_KEY="adc"
gcloud auth application-default login
Use Perplexity AI to get up-to-date information directly within Cursor:
cursor-tools web "What's new in TypeScript 5.7?"
Leverage Google Gemini 2.0 models with 1M+ token context windows for codebase-aware assistance and implementation planning:
# Get context-aware assistance
cursor-tools repo "Explain the authentication flow in this project, which files are involved?"
# Generate implementation plans
cursor-tools plan "Add user authentication to the login page"
The plan command uses multiple AI models to:
Plan Command Options:
--fileProvider=<provider>: Provider for file identification (gemini, openai, anthropic, perplexity, modelbox, or openrouter)--thinkingProvider=<provider>: Provider for plan generation (gemini, openai, anthropic, perplexity, modelbox, or openrouter)--fileModel=<model>: Model to use for file identification--thinkingModel=<model>: Model to use for plan generation--fileMaxTokens=<number>: Maximum tokens for file identification--thinkingMaxTokens=<number>: Maximum tokens for plan generation--debug: Show detailed error informationRepository context is created using Repomix. See repomix configuration section below for details on how to change repomix behaviour.
Above 1M tokens cursor-tools will always send requests to Gemini 2.0 Pro as it is the only model that supports 1M+ tokens.
The Gemini 2.0 Pro context limit is 2M tokens, you can add filters to .repomixignore if your repomix context is above this limit.
Automate browser interactions for web scraping, testing, and debugging:
Important: The browser command requires the Playwright package to be installed separately in your project:
npm install playwright
# or
yarn add playwright
# or
pnpm add playwright
open - Open a URL and capture page content:# Open and capture HTML content, console logs and network activity (enabled by default)
cursor-tools browser open "https://example.com" --html
# Take a screenshot
cursor-tools browser open "https://example.com" --screenshot=page.png
# Debug in an interactive browser session
cursor-tools browser open "https://example.com" --connect-to=9222
act - Execute actions using natural language - Agent tells the browser-use agent what to do:# Single action
cursor-tools browser act "Login as 'user@example.com'" --url "https://example.com/login"
# Multi-step workflow using pipe separator
cursor-tools browser act "Click Login | Type 'user@example.com' into email | Click Submit" --url "https://example.com"
# Record interaction video
cursor-tools browser act "Fill out registration form" --url "https://example.com/signup" --video="./recordings"
observe - Analyze interactive elements:# Get overview of interactive elements
cursor-tools browser observe "What can I interact with?" --url "https://example.com"
# Find specific elements
cursor-tools browser observe "Find the login form" --url "https://example.com"
extract - Extract data using natural language:# Extract specific content
cursor-tools browser extract "Get all product prices" --url "https://example.com/products"
# Save extracted content
cursor-tools browser extract "Get article text" --url "https://example.com/blog" --html > article.html
# Extract with network monitoring
cursor-tools browser extract "Get API responses" --url "https://example.com/api-test" --network
All browser commands (open, act, observe, extract) support these options:
--console: Capture browser console logs (enabled by default, use --no-console to disable)--html: Capture page HTML content (disabled by default)--network: Capture network activity (enabled by default, use --no-network to disable)--screenshot=<file path>: Save a screenshot of the page--timeout=<milliseconds>: Set navigation timeout (default: 120000ms for Stagehand operations, 30000ms for navigation)--viewport=<width>x<height>: Set viewport size (e.g., 1280x720)--headless: Run browser in headless mode (default: true)--no-headless: Show browser UI (non-headless mode) for debugging--connect-to=<port>: Connect to existing Chrome instance. Special values: 'current' (use existing page), 'reload-current' (refresh existing page)--wait=<time:duration or selector:css-selector>: Wait after page load (e.g., 'time:5s', 'selector:#element-id')--video=<directory>: Save a video recording (1280x720 resolution, timestamped subdirectory). Not available when using --connect-to--url=<url>: Required for act, observe, and extract commands--evaluate=<string>: JavaScript code to execute in the browser before the main commandNotes on Connecting to an existing browser session with --connect-to
--connect-to, viewport is only changed if --viewport is explicitly provided--connect-to--connect-to values:
current: Use the existing page without reloadingreload-current: Use the existing page and refresh it (useful in development)All browser commands support video recording of the browser interaction in headless mode (not supported with --connect-to):
--video=<directory> to enable recordingExample:
# Record a video of filling out a form
cursor-tools browser act "Fill out registration form with name John Doe" --url "http://localhost:3000/signup" --video="./recordings"
Console logs and network activity are captured by default:
--no-console to disable console logging--no-network to disable network loggingThe act command supports chaining multiple actions using the pipe (|) separator:
# Login sequence with console/network logging (enabled by default)
cursor-tools browser act "Click Login | Type 'user@example.com' into email | Click Submit" --url "http://localhost:3000/login"
# Form filling with multiple fields
cursor-tools browser act "Select 'Mr' from title | Type 'John' into first name | Type 'Doe' into last name | Click Next" --url "http://localhost:3000/register"
# Record complex interaction
cursor-tools browser act "Fill form | Submit | Verify success" --url "http://localhost:3000/signup" --video="./recordings"
Common issues and solutions:
Element Not Found Errors
--no-headless to visually debug the pagebrowser observe to see what elements Stagehand can identify--timeout)Stagehand API Errors
--modelNetwork Errors
--timeoutVideo Recording Issues
--connect-toPerformance Issues
--headless mode for better performance (default)--viewport--connect-to for developmentAccess GitHub issues and pull requests directly from the command line with rich formatting and full context:
# List recent PRs or issues
cursor-tools github pr
cursor-tools github issue
# View specific PR or issue with full discussion
cursor-tools github pr 123
cursor-tools github issue 456
The GitHub commands provide:
Authentication Methods: The commands support multiple authentication methods:
GITHUB_TOKEN=your_token_heregh is installed and logged in)Without authentication:
With authentication:
Automate iOS app building, testing, and running in the simulator:
# Available subcommands
cursor-tools xcode build # Build Xcode project and report errors
cursor-tools xcode run # Build and run app in simulator
cursor-tools xcode lint # Analyze code and offer to fix warnings
Build Command Options:
# Specify custom build path (derived data)
cursor-tools xcode build buildPath=/custom/build/path
# Specify target device
cursor-tools xcode build destination="platform=iOS Simulator,name=iPhone 15"
Run Command Options:
# Run on iPhone simulator (default)
cursor-tools xcode run iphone
# Run on iPad simulator
cursor-tools xcode run ipad
# Run on specific device with custom build path
cursor-tools xcode run device="iPhone 16 Pro" buildPath=/custom/build/path
The Xcode commands provide:
Generate comprehensive documentation for your repository or any GitHub repository:
# Document local repository and save to file
cursor-tools doc --save-to=docs.md
# Document remote GitHub repository (both formats supported)
cursor-tools doc --from-github=username/repo-name@branch
cursor-tools doc --from-github=https://github.com/username/repo-name@branch
# Save documentation to file (with and without a hint)
# This is really useful to generate local documentation for libraries and dependencies
cursor-tools doc --from-github=eastlondoner/cursor-tools --save-to=docs/CURSOR-TOOLS.md
cursor-tools doc --from-github=eastlondoner/cursor-tools --save-to=docs/CURSOR-TOOLS.md --hint="only information about the doc command"
Customize cursor-tools behavior by creating a cursor-tools.config.json file. This file can be created either globally in ~/.cursor-tools/cursor-tools.config.json or locally in your project root.
The cursor-tools.config file configures the local default behaviour for each command and provider.
Here is an example of a typical cursor-tools.config.json file, showing some of the most common configuration options:
{
// Commands
"repo": {
"provider": "openrouter",
"model": "google/gemini-2.0-pro-exp-02-05:free",
},
"doc": {
"provider": "openrouter",
"model": "anthropic/claude-3.7-sonnet",
"maxTokens": 4096
},
"web": {
"provider": "gemini",
"model": "gemini-2.0-pro-exp",
},
"plan": {
"fileProvider": "gemini",
"thinkingProvider": "perplexity",
"thinkingModel": "r1-1776"
},
"browser": {
"headless": false,
},
//...
// Providers
"stagehand": {
"model": "claude-3-7-sonnet-latest", // For Anthropic provider
"provider": "anthropic", // or "openai"
"timeout": 90000
},
"openai": {
"model": "gpt-4o"
},
//...
}
For details of all configuration options, see CONFIGURATION.md. This includes details of all the configuration options and how to use them.
The GitHub commands support several authentication methods:
Environment Variable: Set GITHUB_TOKEN in your environment:
GITHUB_TOKEN=your_token_here
GitHub CLI: If you have the GitHub CLI (gh) installed and are logged in, cursor-tools will automatically use it to generate tokens with the necessary scopes.
Git Credentials: If you have authenticated git with GitHub (via HTTPS), cursor-tools will automatically:
ghp_ or gho_)To set up git credentials:
git config --global url."https://github.com/".insteadOf git@github.com:
git config --global credential.helper store # Permanent storage
# Or for macOS keychain:
git config --global credential.helper osxkeychain
Authentication Status:
Without authentication:
With authentication (any method):
cursor-tools will automatically try these authentication methods in order:
GITHUB_TOKEN environment variablegh is installed and logged in)If no authentication is available, it will fall back to unauthenticated access with rate limits.
When generating documentation, cursor-tools uses Repomix to analyze your repository. By default, it excludes certain files and directories that are typically not relevant for documentation:
node_modules/, packages/, etc.)dist/, build/, etc.).git/)test/, tests/, __tests__/, etc.).env, .config, etc.)You can customize the files and folders to exclude using two methods, both can be combined together:
.repomixignore file in your project root to specify files to exclude.Example .repomixignore file for a Laravel project:
vendor/
public/
database/
storage/
.idea
.env
repomix.config.json file in your project root for more advanced configuration options:Example repomix.config.json to enable compression and specify what to include:
{
"include": [
"src/**/*",
"README.md",
"package.json"
],
"output": {
"compress": true,
},
}
This configuration will be detected and used automatically by the repo, plan, and doc commands, allowing for precise control over which files are included in the repository analysis.
If both a .repomixignore and an ignore section in repomix.config.json are present then the ignore patterns from both are combined.
The browser commands support different AI models for processing. You can select the model using the --model option:
# Use gpt-4o
cursor-tools browser act "Click Login" --url "https://example.com" --model=gpt-4o
# Use Claude 3.7 Sonnet
cursor-tools browser act "Click Login" --url "https://example.com" --model=claude-3-7-sonnet-latest
You can set a default provider in your cursor-tools.config.json file under the stagehand section:
{
"stagehand": {
"model": "claude-3-7-sonnet-latest", // For Anthropic provider
"provider": "anthropic", // or "openai"
"timeout": 90000
}
}
You can also set a default model in your cursor-tools.config.json file under the stagehand section:
{
"stagehand": {
"provider": "openai", // or "anthropic"
"model": "gpt-4o"
}
}
If no model is specified (either on the command line or in the config), a default model will be used based on your configured provider:
o3-miniclaude-3-7-sonnet-latestAvailable models depend on your configured provider (OpenAI or Anthropic) in cursor-tools.config.json and your API key.
cursor-tools automatically configures Cursor by updating your project rules during installation. This provides:
For new installations, we use the recommended .cursor/rules/cursor-tools.mdc path. For existing installations, we maintain compatibility with the legacy .cursorrules file. If both files exist, we prefer the new path and show a warning.
To get the benefits of cursor-tools you should use Cursor agent in "yolo mode". Ideal settings:
In general you do not need to use the cli directly, your AI coding agent will call the CLI but it is useful to know it exists and this is how it works.
All commands support these general options:
--model: Specify an alternative model--max-tokens: Control response length--save-to: Save command output to a file (in addition to displaying it, like tee)--quiet: Suppress stdout output (only useful with --save-to)--debug: Show detailed error information--help: View all available options--provider: AI provider to use. Valid values: openai, anthropic, perplexity, gemini, openrouterDocumentation command specific options:
--from-github: Generate documentation for a remote GitHub repository (supports @branch syntax)--hint: Provide additional context or focus for documentation generationPlan command specific options:
--fileProvider: Provider for file identification (gemini, openai, anthropic, perplexity, modelbox, or openrouter)--thinkingProvider: Provider for plan generation (gemini, openai, anthropic, perplexity, modelbox, or openrouter)--fileModel: Model to use for file identification--thinkingModel: Model to use for plan generation--fileMaxTokens: Maximum tokens for file identification--thinkingMaxTokens: Maximum tokens for plan generationGitHub command specific options:
--from-github=<GitHub username>/<repository name>[@<branch>]: Access PRs/issues from a specific GitHub repository. --repo is an older, still supported synonym for this option.Xcode command specific options:
buildPath=<path>: Set a custom derived data pathdestination=<destination string>: Set a custom simulator destinationiphone or ipad: Select device typedevice=<device name>: Specify a custom devicebuildPath=<path>: Set a custom derived data pathBrowser command specific options:
--console: Capture browser console logs (enabled by default, use --no-console to disable)--html: Capture page HTML content (disabled by default)--network: Capture network activity (enabled by default, use --no-network to disable)--screenshot: Save a screenshot of the page--timeout: Set navigation timeout (default: 120000ms for Stagehand operations, 30000ms for navigation)--viewport: Set viewport size (e.g., 1280x720)--headless: Run browser in headless mode (default: true)--no-headless: Show browser UI (non-headless mode) for debugging--connect-to: Connect to existing Chrome instance--wait: Wait after page load (e.g., 'time:5s', 'selector:#element-id')--video: Save a video recording (1280x720 resolution, timestamped subdirectory)--url: Required for act, observe, and extract commands. Url to navigate to on connection or one of the special values: 'current' (use existing page), 'reload-current' (refresh existing page).--evaluate: JavaScript code to execute in the browser before the main commandExecute commands using:
cursor-tools <command> [options]
For example:
cursor-tools web "What's new in TypeScript 5.7?"
Command Not Found
cursor-tools is installed globally using npm install -g cursor-tools/usr/local/bin or ~/.npm-global/bin%AppData%\npmAPI Key Errors
.cursor-tools.env exists and contains valid API keyscursor-tools install to reconfigure API keysgcloud auth application-default login and the account has appropriate permissionsgcloud auth application-default print-access-token to check if ADC is workingANTHROPIC_API_KEY or the OPENROUTER_API_KEY are set.OPENROUTER_API_KEY is set.Model Errors
GitHub API Rate Limits
GITHUB_TOKEN=your_token_here
Documentation Generation Issues
--hint to focus on specific partsCursor Integration
cursor-tools install . to update# Get information about new technologies
cursor-tools web "What are the key features of Bun.js?"
# Check API documentation
cursor-tools web "How to implement OAuth2 in Express.js?"
# Compare technologies
cursor-tools web "Compare Vite vs Webpack for modern web development"
# Architecture understanding
cursor-tools repo "Explain the overall architecture of this project"
# Find usage examples
cursor-tools repo "Show me examples of error handling in this codebase"
# Debugging help
cursor-tools repo "Why might the authentication be failing in the login flow?"
# Analyze specific subdirectory
cursor-tools repo "Explain the code structure" --subdir=src/components
# Document specific aspects and save to file without stdout output
cursor-tools doc --save-to=docs/api.md --quiet --hint="Focus on the API endpoints and their usage"
# Document with hint to customize the docs output
cursor-tools doc --save-to=docs/architecture.md --quiet --hint="Focus on system architecture"
# Document dependencies
cursor-tools doc --from-github=expressjs/express --save-to=docs/EXPRESS.md --quiet
# List PRs with specific labels
cursor-tools github pr --from-github facebook/react
# Check recent issues in a specific repository
cursor-tools github issue --from-github vercel/next.js
# View PR with code review comments
cursor-tools github pr 123 --from-github microsoft/typescript
# Track issue discussions
cursor-tools github issue 456 --from-github golang/go
# Build an iOS app with default settings
cursor-tools xcode build
# Build with custom derived data path
cursor-tools xcode build buildPath=~/custom/derived/data
# Run in iPhone simulator
cursor-tools xcode run iphone
# Run on specific iPad model
cursor-tools xcode run device="iPad Pro (12.9-inch) (6th generation)"
# Analyze code quality
cursor-tools xcode lint
open subcommand examples:# Open a URL and get HTML
cursor-tools browser open "https://example.com" --html
# Open and capture console logs and network activity
cursor-tools browser open "https://example.com" --console --network
# Take a screenshot
cursor-tools browser open "https://example.com" --screenshot=page.png
# Run in non-headless mode for debugging
cursor-tools browser open "https://example.com" --no-headless
act, extract, observe subcommands examples:# AI-powered action
cursor-tools browser act "Click on 'Sign Up'" --url "https://example.com"
# AI-powered extraction
cursor-tools browser extract "Get the main content" --url "https://example.com/blog"
# AI-powered observation
cursor-tools browser observe "What can I do on this page?" --url "https://example.com"
cursor-tools is available on npm here
Contributions are welcome! Please feel free to submit a Pull Request. If you used cursor-tools to make your contribution please include screenshots or videos of cursor-tools in action.
Optimise your Vinted accounting with real-time analytics, inventory management, and tax compliance tools.
:link: Start scaling your Vinted business today
Automate your Vinted reselling business with advanced tools like autobuy, custom snipers, and one-click relisting.
:link: Take Vinted reselling to the next level
Build self-driving startups with autonomous AI agents that run your company.
:link: AI Engineer in London? Join the startup revolution
MIT License - see LICENSE for details.
FAQs
CLI tools for AI agents
We found that cursor-tools demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.
Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.