
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
Terminal dashboard that shows your Pokémon AI coding ecosystem — coding agents as Pokémon species, MCP servers as TMs/HMs, and token burn as PP.
Terminal dashboard + shareable HTML Trainer Card for your AI coding ecosystem.
Your coding agents become Pokémon species, MCP servers become TMs/HMs, installed skills fill your Move Tutor log, and token burn tracks as PP.
Features · Installation · Usage · Trainer Card · Scoring · Privacy
Pokégent scans your local machine to give you a live picture of your AI tooling landscape. It detects running AI processes, finds installed MCP servers, discovers skills, tallies model usage from shell history, and measures token burn rates — all locally with zero outbound requests.
Note
Pokégent runs 100% locally. It reads the process table, configuration directories, and log files on your machine and renders the results in your terminal. No telemetry, no network calls, no data leaves your computer.
~/.claude.json, ~/.cursor/mcp.json, ~/.opencode/config.json, ~/.n8n/mcp.json, and per-project MCP configs. Full arsenal displayed as TM-numbered chips.~/.claude/skills, ~/.agents/skills, and ~/.config/opencode/skills..jsonl transcripts, token velocity (PP/min), input/output splits, estimated monthly cost.# Run directly (zero install)
npx pokegent
# Or install globally
npm install -g pokegent
git clone https://github.com/shafiqimtiaz/pokegent.git
cd pokegent
npm install
npm run build
# Start the TUI dashboard (live scan)
pokegent
# Demo mode with realistic mock data
pokegent --demo
# Export scanned data as JSON
pokegent --json
# Generate the shareable HTML Trainer Card
pokegent --share
| Key | Action |
|---|---|
q | Quit |
r | Force scan refresh |
The --share flag generates a self-contained HTML file at ~/Desktop/pokegent-card.html.
The card includes:
pokegent --demo --share # Generate card with mock data
| Dimension | Max | How |
|---|---|---|
| Agents | 350 pts | 75 pts per running agent (cap 4) + 50 if 3+ active |
| MCP servers | 200 pts | 10 pts per server (cap 15) + 1 per tool (cap 50) |
| Models | 200 pts | 30 pts per model (cap 5) + 50 for 3+ providers |
| Skills | 100 pts | 5 pts per skill (cap 20) |
| Token burn | 250 pts | Velocity tiers + session milestones |
| Score | Title |
|---|---|
| 900+ | 🌟 Mythical Champion — Top 1% |
| 750+ | 💎 Shiny Legendary — Top 5% |
| 600+ | 🥇 Pokémon Master — Top 15% |
| 400+ | 🥈 Gym Leader — Top 35% |
| 200+ | 🥉 Elite Trainer — Top 60% |
| <200 | 🌱 Beginner Trainer |
| Badge | Condition |
|---|---|
| 🏆 Pokédex Master | 10+ MCP servers |
| 🦄 Legendary Trainer | 3+ agents running |
| 🧬 Hybrid Evolution | 3+ model providers |
| 🔥 Blast Burn | 10K+ tokens/min velocity |
| 💎 Elite Four | 100+ sessions |
| 🌐 Safari Zone Master | 5+ models detected |
| 📚 Move Tutor | 20+ skills installed |
| Pokémon | Platform | Process | Config paths |
|---|---|---|---|
| 🔮 Mewtwo | Claude Code | claude, claude-code | ~/.claude, ~/.claude.json |
| 🍃 Venusaur | Codex | codex, openai-codex | ~/.codex |
| 🐢 Blastoise | Copilot CLI | copilot, github-copilot | ~/.copilot |
| ⚡ Pikachu | Gemini CLI | gemini, gemini-cli | ~/.gemini |
| 🦊 Eevee | Cursor | cursor | ~/.cursor |
| 🔥 Charizard | Amp | amp, amp-cli | ~/.amp |
| 🦎 Charmander | Cline | cline | ~/.cline |
| 👻 Gengar | Roo Code | roo, roo-code | ~/.roo |
| 🐻 Snorlax | Kilo Code | kilo, kilo-code | ~/.kilo |
| 🦇 Zubat | Kiro | kiro | ~/.kiro |
| 🎈 Jigglypuff | Crush | crush | ~/.crush |
| 🍮 Ditto | OpenCode | opencode | ~/.opencode |
| 💪 Machamp | Factory Droid | factory, factory-droid | ~/.factory-droid |
| 🐉 Rayquaza | Antigravity | antigravity, ag-cli | ~/.antigravity |
| ⛵ Lapras | Kimi CLI | kimi, kimi-cli | ~/.kimi |
| 🐉 Dragonite | Qwen Code | qwen, qwen-code | ~/.qwen |
~/.claude.json (including per-project mcpServers)~/.claude/mcpServers.json~/.claude/config.json~/.config/claude/settings.json~/.cursor/mcp.json~/.opencode/config.json~/.roo/mcp.json~/.kilo/mcp.json~/.n8n/mcp.json~/.claude/skills~/.agents/skills~/.config/opencode/skillsAnthropic: Claude Fable 5, Sonnet 5, Opus 4.8/4.5/4.1, Sonnet 4.5, Haiku 4.5, 4 Opus, 4 Sonnet, 3.7 Sonnet, 3.5 Sonnet, 3 Haiku.
OpenAI: GPT-5, GPT-4.1, GPT-4o, o4-mini, o3, o3-mini.
Google: Gemini 3, 2.5 Pro, 2.5 Flash.
Other: DeepSeek V3/R1, Qwen 3, Llama 4.
Pokégent runs 100% locally. No data leaves your machine. No telemetry, no analytics, no outbound network requests during scanning. All process table reads, configuration file scans, and log parsing happen entirely on your computer. The --share card is written as a local HTML file on your desktop — sharing it is your choice.
FAQs
Terminal dashboard that shows your Pokémon AI coding ecosystem — coding agents as Pokémon species, MCP servers as TMs/HMs, and token burn as PP.
The npm package pokegent receives a total of 0 weekly downloads. As such, pokegent popularity was classified as not popular.
We found that pokegent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.