The story’s score and claims

Comments on No. 24 of 109 · GitHub · edition of Friday 6 November 2026

Autorun-audit – find what runs when you open, CD into or install a repo

Summary

autorun-audit is an open-source command-line scanner that lists code executing automatically when a repository is opened, entered, installed, or used by an AI agent, and flags suspicious entries. It can scan a remote repo via a hardened shallow clone, or check Python .pth startup files against package records.

Comments

Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules