---
title: "block-unpinned-agent-components"
description: "Pre-commit gate for the mechanizable slice of ASI04: agent components pulled at an unpinned version. Blocks npx/uvx/bunx launches at @latest — the standard MCP server idiom — quoted \"@latest\" arguments in agent config, a"
canonical: https://agentpluginsdirectory.com/plugins/block-unpinned-agent-components--open-coder-ai-org
last-updated: 2026-09-08
---

# block-unpinned-agent-components
Pre-commit gate for the mechanizable slice of ASI04: agent components pulled at an unpinned version. Blocks npx/uvx/bunx launches at @latest — the standard MCP server idiom — quoted "@latest" arguments in agent config, and :latest container images. Language-manifest dependencies are verify-dependency-exists; signature and provenance stay with the advisory owasp-asi04 policy. Escape: 'pragma: allowlist unpinned' on the same line.
- Slug: block-unpinned-agent-components--open-coder-ai-org
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai-org/chock-catalog
- Manifest: agentic-security/block-unpinned-agent-components/plugin.json
- Version: 0.0.3
- License: Apache-2.0
- Category (editorial): other
- Skills: 1 (block-unpinned-agent-components)
- MCP servers: 0
- Stars: 1
- Listing: https://agentpluginsdirectory.com/plugins/block-unpinned-agent-components--open-coder-ai-org
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json