Surface area
Map every agent call
streamText, ToolLoopAgent, tools, routes, hooks—with your ai version.
Scan prompts, tools, loop bounds, approval gates, and telemetry—then get copy-paste fix snippets, agent-map.md for your IDE agent, and CI guardrails. Your code never leaves your machine.
Surface area
streamText, ToolLoopAgent, tools, routes, hooks—with your ai version.
Safety
Unbounded loops, missing needsApproval, and required tools without a done handler.
Telemetry
experimental_telemetry, functionId, PII recording, and scattered model strings.
Action
Copy-paste fixes per risk. Fail builds with --ci --max-high 0.
CI
Exit non-zero when high-severity findings exceed your threshold. JSON output diffs against the previous scan.