Agent WranglersReviewing agent output Required
Check that every package and API exists
Verify every new dependency and every called API exists, is the official one and does what the code assumes.
How to do it
Models invent package names and function signatures. Attackers register invented names, which is called slopsquatting. Look up each new package in its registry, and check its owner, age and download count. Check called functions against the library's documentation. See review every new package.
How to check
Every package added in the change appears in the review with a link to its official source. The install uses the lock file, and an audit passes.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers ai development playbook: https://agentwranglers.se/playbook/ai-assisted-development/reviewing-agent-output/no-invented-packages.