OpenPitStop

OpenPitStop CLI

**The agent finally has a referee it can't cheat.** OpenPitStop is a CLI that scans your repo, scores it, and checks everything your AI coding agent does — so when it says "done", you know it's actually done.

[](https://www.npmjs.com/package/openpitstop) [](https://github.com/Krish-1507/OpenPitStop/actions/workflows/ci.yml) [](LICENSE)

AI coding agents are brilliant at fixing things, and just as brilliant at *saying they did* when they didn't. OpenPitStop measures your repo with scans, seals every number so it can't be edited later, attacks your own app with a live penetration test, and checks every change your agent makes. The exit codes tell you the truth: `0` clean, `1` suspicious, `2` confirmed cheat.

---

Quick install

**Start here:** `npx openpitstop try .` scores any repo in about two seconds with zero install, or `npm i -g openpitstop` for daily use. No account, no config, no SaaS.

**Zero install, try it now:**

npx openpitstop try .

Scores any repo in about two seconds of scanning. The first run downloads the package once, after that it is instant.

**Install it globally (recommended for daily use):**

npm install -g openpitstop
openpitstop --help

Now every command starts with `openpitstop` instead of `npx openpitstop`.

Requires **Node.js 22+**, that is the only dependency. For the full setup (slash command, pre-commit hook, CI), see [Install](#install).

Use-Cases

• You ship with an AI agent and want proof it actually finished. The gate and verify turn "the agent says done" into a pass or fail you can block a build on.
• You want a security scan that proves findings, not just guesses.