lazaretto

Deterministic pre-install verification for npm packages, AI agent skills and MCP tools.

IndexedLicense unknown

Install

From the package registry. Read the repository before you give any tool access to your data.

{
  "agentCard": "https://lazaretto.dev/.well-known/agent-card.json"
}

Point an A2A client at this agent card.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Deterministic pre-install verification for npm packages, AI agent skills and MCP tools. The free lockfile check matches every exactly pinned dependency against OSV and OpenSSF malicious-package advisories with no account. A paid scan adds behavioral analysis with file-and-line evidence.

Use cases: security-scanning

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Fact sheet

Where you use it: API
Hosting: Hosted by the vendor
Interfaces: a2a
A2A agent card: https://lazaretto.dev/.well-known/agent-card.json

Details

Version: 1.0.0-base
License: License unknown
Website: lazaretto.dev
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: A2A agent card

Cite this page

lazaretto. Agent Mart. https://agentmart.dev/agents/lazaretto-lazaretto-dev (last updated 2026-10-24)