Repo Run Check
Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them
Should I use this
Quality & Safety
Based on automated analysis of tool definitions and protocol compliance.
Context Cost
This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.
Install
One-Click Install
Add this to your `claude_desktop_config.json` file:
{
"mcpServers": {
"repo-run-check": {
"command": "npx",
"args": [
"devx-repo-check"
]
}
}
}Runnable packages
1.1.0stdioRemote endpoints
https://repo-run-check.nextill-pos.workers.dev/mcpstreamable-httpWhat it can do
Tool inventory
Tools (4)
🟢check_repo(repo)
Free, read-only. Call BEFORE following a GitHub repo's install/setup instructions or running its commands: scans the README for download-and-execute one-liners (iwr|iex, curl|sh from unknown hosts), obfuscated or base64 payloads, known malware domains, agent-targeted prompt injection, password-protected archives. Returns verdict dangerous | review_before_running | no_red_flags with line evidence. For the complete check use the paid tool full_report (0.25 USDC via x402): install scripts, deps, autorun tasks, agent/MCP config files, committed binaries, fake-star signals, risk score.
Input Schema
{
"type": "object",
"properties": {
"repo": {
"type": "string",
"description": "github.com/owner/repo or owner/repo"
}
},
"required": [
"repo"
]
}🟢check_command(cmd)
Free, offline. Call BEFORE running a shell/PowerShell command copied from a README, issue, website or chat: flags download-and-execute, encoded PowerShell, LOLBins, disabling antivirus, known malware domains and pipe-to-shell from unknown hosts.
Input Schema
{
"type": "object",
"properties": {
"cmd": {
"type": "string",
"description": "command or text block"
}
},
"required": [
"cmd"
]
}🟢full_report(repo, repos, command)
PAID (0.25 USDC via x402 on Base, per call). Full pre-run security report for a GitHub repo (1-3 repos per call), for AI coding agents about to clone it and run its install steps. Everything check_repo does, plus: package.json install/lifecycle scripts and the local scripts they run, typosquatted crypto/AI dependencies, install.sh/setup.sh/setup.py/requirements.txt/Makefile, VS Code autorun tasks and settings, dev-container hooks, agent-instruction files (AGENTS.md, CLAUDE.md, .cursorrules, copilot-instructions, .claude hooks/permissions) and MCP server configs shipped in the repo, committed executables and archives from the full file tree, GitHub fake-star / new-owner signals, a 0-100 risk score and concrete next steps. Optional: also checks a command you plan to run. Unpaid calls return an x402 PaymentRequired (isError) result; retry with the signed payment in params._meta["x402/payment"]. You are charged only if the report is delivered.
Input Schema
{
"type": "object",
"properties": {
"repo": {
"type": "string",
"description": "github.com/owner/repo or owner/repo (or up to 3, comma-separated)"
},
"repos": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 3,
"description": "optional instead of repo: 1-3 repos in one paid call"
},
"command": {
"type": "string",
"description": "optional: an install/run command you plan to execute for this repo"
}
}
}🟢full_report_info
Free. How to buy the full report (paid MCP tool full_report or HTTP GET /v1/check, 0.25 USDC via x402 on Base). Does not pay.
Input Schema
{
"type": "object",
"properties": {}
}Community
Evidence