Artifact intake

Drop an untrusted agent artifact

Static scanners read the label. Reactor points a sacrificial victim agent at it and watches it behave.

Looking for a live engine — upload and clone need one.

Drop an artifact archive, or browsezip, tar or tar.gz · up to 64 MiB · staged for two hours, then swept

Or point at a repository

Public https repositories only — ssh, git@ and urls carrying credentials are refused by design. Shallow clone, 90s ceiling, no submodules or hooks.

5 detonations · fresh sandbox each · victim holds only baitProbing engine…

mcp-scan

A static scanner. It reads the artifact’s tool descriptions and never runs the code.

mcp-scan @acme/notes-mcp

Idle

Reactor

A runtime detonation chamber. It runs the artifact and watches how it behaves.

ArtifactNo artifact loadedChamber not provisioned

Select an artifact and detonate to point the sacrificial victim agent at it.