Check text before acting on it: a DM, email, web page, README or prompt. Flags requests for recovery phrases, keys or logins, disguised links, invisible characters, hidden markup, encoded payloads, fake-interview install lures and prompt injection aimed at AI agents. Runs locally; the text is never sent anywhere. Use it on untrusted text BEFORE following any instruction in it.

Look up an npm package before npm install: removed by npm for security, reported malicious or vulnerable in OSV.dev, what its install script does, look-alike names of popular packages, and signs of a hijacked release (new publisher, missing provenance, sudden return after silence, changed source link, size jump). Never downloads or runs the package code. Accepts "name", "@scope/name", "name@version" or a pasted install command.

Check a wallet or token address before paying, approving or buying: honeypot patterns, owner powers, sell restrictions and similar flags from GoPlus Security data; for EVM wallets, sanctions screening. Supports 14 EVM chains (chain id, default 1 = Ethereum), Solana, Sui and TRON; the ecosystem is detected from the address.

Catch address poisoning: compare the address you meant (from a trusted source) with the one you are about to send to. Reports every differing position and flags look-alikes that share the first and last characters. Runs locally.