install_package
Evaluate npm package risk before installing. Returns a structured verdict (ok/warn/block) to prevent malicious or lifecycle script execution.
Instructions
Evaluate the risk of an npm package before installing it. Returns a structured verdict (ok/warn/block) with the signals that triggered. Use this BEFORE calling npm install for any package. If level is 'block', do not install without explicit user approval.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | npm package name. Scoped packages like `@scope/name` are supported. | |
| version | No | Optional pinned version. If omitted, the latest version is evaluated. |