Unknown Repos
Risks around cloning, opening, or running unfamiliar repositories.
Discovery
Categories
Browse Before You Run safety-card categories. Each category is a review aid for beginner and indie developers.
Category index
Malicious Packages
Risks from unreviewed dependencies, install scripts, and package updates.
Secrets & Tokens
Risks of exposing credentials in prompts, code, logs, or repositories.
AI Coding Agents
Risks when trusting AI-assisted workflows without review boundaries.
Dangerous Commands
Risks from running unknown terminal commands without validation.
Scams & Fake Jobs
Risks from social engineering, suspicious tests, and fake recruiting flows.