NestDaddy

Repo Run Check

io.github.devx-agent/repo-run-check · v1.1.0

Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them

Connect Remote server

Terminal
claude mcp add --transport http repo-run-check https://repo-run-check.nextill-pos.workers.dev/mcp
~/.cursor/mcp.json
{
  "mcpServers": {
    "repo-run-check": {
      "url": "https://repo-run-check.nextill-pos.workers.dev/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "repo-run-check": {
      "type": "http",
      "url": "https://repo-run-check.nextill-pos.workers.dev/mcp"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://repo-run-check.nextill-pos.workers.dev/mcp

Tools 4 found in our last check

  • check_repo

    Free, read-only. Call BEFORE following a GitHub repo's install/setup instructions or running its commands: scans the README for download-and-execute one-liners (iwr|iex, curl|sh from unknown hosts), obfuscated or base64 payloads, known malware domains, agent-targeted prompt inje…

  • check_command

    Free, offline. Call BEFORE running a shell/PowerShell command copied from a README, issue, website or chat: flags download-and-execute, encoded PowerShell, LOLBins, disabling antivirus, known malware domains and pipe-to-shell from unknown hosts.

  • full_report

    PAID (0.25 USDC via x402 on Base, per call). Full pre-run security report for a GitHub repo (1-3 repos per call), for AI coding agents about to clone it and run its install steps. Everything check_repo does, plus: package.json install/lifecycle scripts and the local scripts they…

  • full_report_info

    Free. How to buy the full report (paid MCP tool full_report or HTTP GET /v1/check, 0.25 USDC via x402 on Base). Does not pay.

Details

Endpointhttps://repo-run-check.nextill-pos.workers.dev/mcp (Streamable HTTP)
Package[email protected] (NPM, stdio)
First published30 Oct 2026
Last updated30 Oct 2026
Registry nameio.github.devx-agent/repo-run-check

More developer tools servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.