Example reports
Made-up repos built from patterns in public threat research, and one ordinary library for comparison. Nothing in them can run: every address is a reserved test range. Each opens the full report PreClone shows for it.
- Fake job take-home with a VS Code task, an install script and a hidden loaderA recruiter on LinkedIn sends a “senior full-stack take-home”: clone it, run it, fix the wallet bug by Friday.defi-dashboard-assessment
- Freelance-gig repo: payload in next.config.js, an AGENTS.md trap and a git dependencyA new “client” on Upwork wants a quick fix to their Next.js site and shares the repo before the contract starts.nimbus-landing
- AI-agent booby trap: a Claude Code hook, an MCP server and invisible instructionsA popular-looking “AI agent starter kit” you open in Claude Code or Cursor to try out.orbit-agent-starter
- Zip lure with a live git hook and a booby-trapped .git/configA “prospective client” emails a zip of their codebase: “unzip, check out the dev branch, tell us what's broken”.brightpath-handoff.zip
- A normal library: Husky and a build step, nothing hiddenFor comparison: an ordinary library where only well-known tooling runs.tiny-slugify