AcademySkillsDevelopment

Repo Forensics

Development and IT security teams that review third-party skills, plugins and MCP servers before adopting them.

  • Recommendedour rating
  • 191gitHub stars
  • Not statedlicence
  • 14 days agolast update
git clone https://github.com/alexgreensh/repo-forensics.git

What it does

An offline security scanner for AI-agent repositories, skills, plugins and MCP servers. It runs locally with no dependencies and no telemetry, so you can audit untrusted code before it reaches your agent.

Use cases

  1. 01Scan a skill before installing it
  2. 02Audit an MCP server repository for risky code
  3. 03Review a plugin from an unknown source

Questions about
Repo Forensics.

What is Repo Forensics used for?

Development and IT security teams that review third-party skills, plugins and MCP servers before adopting them. An offline security scanner for AI-agent repositories, skills, plugins and MCP servers. It runs locally with no dependencies and no telemetry, so you can audit untrusted code before it reaches your agent.

How do I install Repo Forensics?

Run this in your terminal: git clone https://github.com/alexgreensh/repo-forensics.git

Is Repo Forensics open source?

The code is on GitHub (alexgreensh/repo-forensics). Check the licence in the repository before using it at work.

Is Repo Forensics safe to use?

It passed our automatic scan for credential theft, hidden instructions and risky install commands. Third party open source software. Sabemos AI does not maintain it. Check the code and permissions before you connect it to company data.