Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them
Connect Remote server
claude mcp add --transport http repo-run-check https://repo-run-check.nextill-pos.workers.dev/mcp
{
"mcpServers": {
"repo-run-check": {
"url": "https://repo-run-check.nextill-pos.workers.dev/mcp"
}
}
}
{
"servers": {
"repo-run-check": {
"type": "http",
"url": "https://repo-run-check.nextill-pos.workers.dev/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://repo-run-check.nextill-pos.workers.dev/mcp
Tools 4 found in our last check
check_repoFree, read-only. Call BEFORE following a GitHub repo's install/setup instructions or running its commands: scans the README for download-and-execute one-liners (iwr|iex, curl|sh from unknown hosts), obfuscated or base64 payloads, known malware domains, agent-targeted prompt inje…
check_commandFree, offline. Call BEFORE running a shell/PowerShell command copied from a README, issue, website or chat: flags download-and-execute, encoded PowerShell, LOLBins, disabling antivirus, known malware domains and pipe-to-shell from unknown hosts.
full_reportPAID (0.25 USDC via x402 on Base, per call). Full pre-run security report for a GitHub repo (1-3 repos per call), for AI coding agents about to clone it and run its install steps. Everything check_repo does, plus: package.json install/lifecycle scripts and the local scripts they…
full_report_infoFree. How to buy the full report (paid MCP tool full_report or HTTP GET /v1/check, 0.25 USDC via x402 on Base). Does not pay.
Details
| Endpoint | https://repo-run-check.nextill-pos.workers.dev/mcp (Streamable HTTP) |
| Package | [email protected] (NPM, stdio) |
| First published | 30 Oct 2026 |
| Last updated | 30 Oct 2026 |
| Registry name | io.github.devx-agent/repo-run-check |
More developer tools servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
