Argus is an open-source static-analysis CLI that inspects every package an AI agent or MCP server tries to install. It runs SAST on the actual source code and blocks malicious payloads before they touch your machine.