Unverified50% confidenceCautionExact time
Before installing dependencies of unknown origin, you should verify their behavior in an isolated environment (such as a virtual machine or container) and check whether the official GitHub repository mentions the tool.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedBy default, the classifier only considers the user's working directory and Git remote repositories as internal; everything else—including the user's company infrastructure—is treated as external.68% similarUnverifiedCombining remote package resolution ambiguity with unsafe loading and trust_remote_code allows code from the selected repository to be executed.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1043619API
curl https://kongchang.com/api/v1/knowledge/claims/1043619MCP
get_claim(id=1043619)