AI agents are increasingly used for malicious purposes, such as injecting malware into package repositories like RubyGems. Developers need a way to detect and block these attacks in real-time.
Create a lightweight monitoring tool that scans package updates for suspicious patterns and alerts users or blocks malicious changes.
Sell subscriptions to development teams and enterprises managing large codebases, where security is a top priority.
The MVP could focus on RubyGems integration, with plans to expand to npm, PyPI, and other package managers.
The biggest risk is false positives, which could disrupt legitimate workflows.