Referenced package does not exist
LLMS-SUPPLY-001 · v1.0
What it detects
A package name referenced in the site's machine-readable agent instructions returns a definitive 404 from its registry.
Why it matters
An agent following the documentation fails — and an unregistered name is registrable by anyone, so today's broken reference becomes tomorrow's supply-chain foothold pointed at from your own docs.
How to fix
Correct or remove the package names in your agent-facing documentation. A name that returns 404 today can be registered by someone else tomorrow, at which point your own published instructions point agents at their code. Fix the spelling, publish the package yourself, or delete the reference — and pin versions for the ones that are real.
Example
pip install acme-agent # 404 from the package registry
References
Last reviewed: 2026-09-01 · rule v1.0