Auditer un paquet avant que l'agent l'installe
You write an audit skill: a folder with a single file that says, before any package installation, to stop and report who maintains it, when it was published, whether it runs anything on install and what dependencies it pulls in, then to give a verdict and wait. You drop it into each agent you use, and each one stops, reports and waits.