← candidates

OpenVSX deepsweep-ai.deepsweep @2.0.81

Signals fired

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "deepsweep-ai"
  ],
  "versions": 54
}

Evidence (package doc at flag time)

{
  "average_rating": 0.0,
  "categories": [
    "AI",
    "Linters",
    "Other"
  ],
  "display_name": "DeepSweep: AI Agent Security & Code Review",
  "install_count": 61890.0,
  "last_updated": "2026-11-06T08:36:52.080810Z",
  "latest_version": "2.0.81",
  "num_versions": 101,
  "published_date": "",
  "publisher": "deepsweep-ai",
  "publisher_display": "BradMcEvilly",
  "rating_count": 0.0,
  "release_date": "",
  "repository": "",
  "short_description": "Security review for AI coding agents: AI agent security, vulnerability detection and secrets review, locally. Your AI agents have shell access, repo write permissions, and your credentials. Do you know what they can do without asking you? DeepSweep reads your agents' settings and MCP configs locally. It shows agents allowed to run any shell command, or to push, deploy or publish, without asking you. It shows access beyond the project, such as the whole disk, your home folder or no sandbox. It flags MCP servers that are not pinned to a version or that reach a remote server with no sign-in, and credentials written in plain text into agent configs. The agent environment review runs in under a second. DeepSweep also reviews the code your agent writes as it lands for security vulnerabilities and secrets, and records what it found in a local report you can export. Runs in Antigravity, Trae, Devin Desktop (formerly Windsurf), Kiro and VS Code, and in Cursor when installed from the VSIX, alongside Claude Code, OpenAI Codex, GitHub Copilot, Gemini Code Assist, Cline, Tabnine, Amazon Q Developer and Aider. Run your first review free. No account required.",
  "signal_details": {
    "install_count_anomaly": "install count 12865 -> 61890 (4.8\u00d7)",
    "repository_removed": "prior repo 'https://github.com/deepsweep-ai/deepsweep-vscode.git' no longer in manifest"
  },
  "tags": [
    "agent mode",
    "agent permissions",
    "ai agent security",
    "ai code review",
    "antigravity",
    "auto approve",
    "claude",
    "claude code",
    "code review",
    "code security",
    "codex",
    "copilot",
    "cursor",
    "dependency scanner",
    "devin",
    "gemini cli",
    "hallucinated packages",
    "keybindings",
    "least privilege",
    "mcp",
    "mcp security",
    "prompt injection",
    "secrets",
    "security",
    "security vulnerabilities",
    "supply chain security",
    "trae",
    "vulnerability",
    "vulnerability detection",
    "windsurf"
  ],
  "version_files_count": 0,
  "version_last_updated": "2026-11-06T08:36:52.080810Z",
  "version_size": 0
}