Grade B (Some risk signals). Use --ignore-scripts and pin exact version.
Threat reports
None on file
Latest version
0.60.1
First published
9 months ago
Maintainers
1
Runs code at install
postinstall
Catalog grade
B — Some risk signals
Est. context load
~50 tokens idle · ~900 tokens when active (on-demand skill)
Install it pinned and without install scripts:
npm install --ignore-scripts --save-exact "agnix"
Based on public adoption and transparency signals as of Oct 24, 2026. Our opinion, not a code audit or security guarantee. Answers change through the day.
The answer above comes from threat reports and registry facts. A free first look also analyzes this version’s published files and shows the grade and how many serious issues we found. The full report adds the evidence, what it can access and what it does at install: $19 once, or 3 a month on Pro.