protogrid
Sign inAdd to your agent

Search / io.github.devx-agent/repo-run-check

Repo Run Check

R0· no sign-in

Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them

v1.1.0 · active · repository · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality74needs work
Trust96of 100
Uptime, 30 days91%
Latency p50142 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "repo-run-check": {
      "type": "http",
      "url": "https://repo-run-check.nextill-pos.workers.dev/mcp"
    }
  }
}
claude mcp add --transport http repo-run-check https://repo-run-check.nextill-pos.workers.dev/mcp
[mcp_servers.repo-run-check]
url = "https://repo-run-check.nextill-pos.workers.dev/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "repo-run-check": {
      "type": "remote",
      "url": "https://repo-run-check.nextill-pos.workers.dev/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "repo-run-check": {
      "type": "http",
      "url": "https://repo-run-check.nextill-pos.workers.dev/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=repo-run-check&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vcmVwby1ydW4tY2hlY2submV4dGlsbC1wb3Mud29ya2Vycy5kZXYvbWNwIn0%3D"
}
{
  "servers": {
    "repo-run-check": {
      "type": "http",
      "url": "https://repo-run-check.nextill-pos.workers.dev/mcp"
    }
  }
}
{
  "mcpServers": {
    "repo-run-check": {
      "httpUrl": "https://repo-run-check.nextill-pos.workers.dev/mcp"
    }
  }
}
extensions:
  "repo-run-check":
    enabled: true
    name: "repo-run-check"
    type: streamable_http
    uri: "https://repo-run-check.nextill-pos.workers.dev/mcp"
    timeout: 300

Quality 74 / 100needs work

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene86 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations4 of 4 tools declare readOnlyHint or destructiveHint
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: full_report (destructiveHint, idempotentHint); full_report_info (destructiveHint, idempotentHint, openWorldHint); check_repo (destructiveHint, idempotentHint); …
  • pass
    tools.token_costabout 707 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability50 · weight 15
  • pass
    stability.changes3 tool changes in 30 days
  • fail
    stability.rug_pull1 tools kept their name but changed most of their description in 30 days; review before trusting them
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvabledeps.dev does not know [email protected]

4 tools, about 707 tokens to load them all · tool set add1c9453415 · tools last changed 2026-11-02 · checked 2026-11-07 18:01 UTC

Tool changes

  • full_report_infochangeddescriptionmeaning changed
    before

    How to buy the full repo check via x402. Does not pay.

    after · 42% of words in common

    Free. How to buy the full report (paid MCP tool full_report or HTTP GET /v1/check, 0.25 USDC via x402 on Base). Does not pay.

  • full_reportadded

    PAID (0.25 USDC via x402 on Base, per call). Full pre-run security report for a GitHub repo (1-3 repos per call), for AI coding agents about to clone it and run its install steps. Everything check_repo does, plus: package.json install/lifecycle scripts and the local scripts they run, typosquatted crypto/AI dependencies, install.sh/setup.sh/setup.py/requirements.txt/Makefile, VS Code autorun tasks and settings, dev-container hooks, agent-instruction files (AGENTS.md, CLAUDE.md, .cursorrules, copilot-instructions, .claude hooks/permissions) and MCP server configs shipped in the repo, committed executables and archives from the full file tree, GitHub fake-star / new-owner signals, a 0-100 risk score and concrete next steps. Optional: also checks a command you plan to run. Unpaid calls return an x402 PaymentRequired (isError) result; retry with the signed payment in params._meta["x402/payment"]. You are charged only if the report is delivered.

  • check_repochangeddescription
    before

    Free, read-only. Call BEFORE following a GitHub repo's install/setup instructions or running its commands: scans the README for download-and-execute one-liners (iwr|iex, curl|sh from unknown hosts), obfuscated or base64 payloads, known malware domains, agent-targeted prompt injection, password-protected archives. Returns verdict dangerous | review_before_running | no_red_flags with line evidence. Paid full check (0.005 USDC via x402) adds package.json install scripts, typosquatted deps, install.sh/setup.py, .vscode autorun tasks and fake-star signals.

    after · 79% of words in common

    Free, read-only. Call BEFORE following a GitHub repo's install/setup instructions or running its commands: scans the README for download-and-execute one-liners (iwr|iex, curl|sh from unknown hosts), obfuscated or base64 payloads, known malware domains, agent-targeted prompt injection, password-protected archives. Returns verdict dangerous | review_before_running | no_red_flags with line evidence. For the complete check use the paid tool full_report (0.25 USDC via x402): install scripts, deps, autorun tasks, agent/MCP config files, committed binaries, fake-star signals, risk score.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 96 / 100

provenance90
liveness96
freshness100
hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-91% +updated-8d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

[email protected] npmthis version is not known to the dependency resolver

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://repo-run-check.nextill-pos.workers.dev/mcp streamable-httpnoneyes91%142 ms2025-11-252026-11-07
packageregistryversionruntimesecrets
devx-repo-checknpm1.1.0–

Tools (4)

check_commandread-onlyFree, offline. Call BEFORE running a shell/PowerShell command copied from a README, issue, website or chat: flags download-and-execute, encoded PowerShell, LOLBins, disabling antivirus, known malware domains and pipe-to-shell from unknown hosts.
check_reporead-onlyFree, read-only. Call BEFORE following a GitHub repo's install/setup instructions or running its commands: scans the README for download-and-execute one-liners (iwr|iex, curl|sh from unknown hosts), obfuscated or base64 payloads, known malware domains, agent-targeted prompt injection, password-protected archives. Returns verdict dangerous | review_before_running | no_red_flags with line evidence. For the complete check use the paid tool full_report (0.25 USDC via x402): install scripts, deps, autorun tasks, agent/MCP config files, committed binaries, fake-star signals, risk score.
full_reportread-onlyPAID (0.25 USDC via x402 on Base, per call). Full pre-run security report for a GitHub repo (1-3 repos per call), for AI coding agents about to clone it and run its install steps. Everything check_repo does, plus: package.json install/lifecycle scripts and the local scripts they run, typosquatted crypto/AI dependencies, install.sh/setup.sh/setup.py/requirements.txt/Makefile, VS Code autorun tasks and settings, dev-container hooks, agent-instruction files (AGENTS.md, CLAUDE.md, .cursorrules, copilot-instructions, .claude hooks/permissions) and MCP server configs shipped in the repo, committed executables and archives from the full file tree, GitHub fake-star / new-owner signals, a 0-100 risk score and concrete next steps. Optional: also checks a command you plan to run. Unpaid calls return an x402 PaymentRequired (isError) result; retry with the signed payment in params._meta["x402/payment"]. You are charged only if the report is delivered.
full_report_inforead-onlyFree. How to buy the full report (paid MCP tool full_report or HTTP GET /v1/check, 0.25 USDC via x402 on Base). Does not pay.

Schemas: list_tools.

Similar MCP servers

  • Repo Security Scanner — Malicious Code & Supply ChainR1quality 88
    io.github.eltociear/repo-security-scanner

    Audit GitHub repos for malicious and supply-chain code before you depend on them.

  • cra-checkR0quality 91
    io.github.holistis/cra-check

    Free read-only check of a public GitHub repo for eight security signals related to the EU CRA.

  • BACKLNKR1quality 81
    com.backlnk/backlnk

    Free technical SEO, AEO, LLMO and GEO checks for AI agents: check a page, fix it, verify the fix.

  • auditL0
    io.github.commitshow/audit

    Score a public GitHub repo 0-100, or search Legit.Show for launched software by what we measured.

  • vibescanR0quality 79
    net.bigfloppy.vibescan/vibescan

    Free security scan for AI-written GitHub repos: leaked keys, .env, eval, SQLi, CORS.

  • isitdoneL0
    io.github.raimondasl/isitdone

    Make a coding agent prove it: run the repo's real tests, typecheck and lint before it says done.

More from io.github.devx-agent

  • 7702 Sweeper CheckR0quality 85
    io.github.devx-agent/7702-sweeper-check

    Free read-only EIP-7702 delegation / wallet-sweeper check for EVM addresses on 8 chains

  • Address Poisoning CheckR0quality 85
    io.github.devx-agent/address-poisoning-check

    Before sending crypto, check the recipient for address poisoning: lookalikes and bad checksums

  • Crypto Link Checkunknownquality 85
    io.github.devx-agent/crypto-link-check

    Check crypto links for phishing lookalikes of wallets, exchanges and dapps before wallet connect

  • DevX Multichain BalancesR0quality 85
    io.github.devx-agent/multichain-balances

    Balances on 7 EVM chains, Solana, Tron: free one-chain lookup; full call 0.002 USDC via x402.

  • DevX Token SnapshotR0quality 85
    io.github.devx-agent/token-snapshot

    ERC-20 price, liquidity, pools, holder hints, risk flags on 7 EVM chains. Paid 0.003 USDC via x402.

Official server.json
{
  "name": "io.github.devx-agent/repo-run-check",
  "title": "Repo Run Check",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://repo-run-check.nextill-pos.workers.dev/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.1.0",
  "packages": [
    {
      "version": "1.1.0",
      "transport": {
        "type": "stdio"
      },
      "identifier": "devx-repo-check",
      "registryType": "npm",
      "packageArguments": [
        {
          "type": "positional",
          "value": "mcp"
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/devx-agent/repo-run-check",
    "source": "github"
  },
  "websiteUrl": "https://repo-run-check.nextill-pos.workers.dev",
  "description": "Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them"
}