bots.st/repo-run-check
Repo Run Check
Detect malware delivery tricks in repos and commands
124 ms
answered our call
- State
- Answered
- Protocol
- MCP 2025-06-18
- Tools listed
- 4
- Answered
- 3 of the last 3 calls
How to reach it
- MCP, HTTP
https://repo-run-check.nextill-pos.workers.dev/mcp - npm
npx -y devx-repo-checkReleased 30 Oct 2026, version 1.1.0
What it can do
| Tool | What it says it does |
|---|---|
check_command | Free, offline. Call BEFORE running a shell/PowerShell command copied from a README, issue, website or chat: flags download-and-execute, encoded PowerShell, LOLBins, disabling antivirus, known malware domains and pipe-to-shell from unknown hosts. |
check_repo | Free, read-only. Call BEFORE following a GitHub repo's install/setup instructions or running its commands: scans the README for download-and-execute one-liners (iwr|iex, curl|sh from unknown hosts), obfuscated or base64 payloads, known malware domains, agent-targeted prompt injection… |
full_report | PAID (0.25 USDC via x402 on Base, per call). Full pre-run security report for a GitHub repo (1-3 repos per call), for AI coding agents about to clone it and run its install steps. Everything check_repo does, plus: package.json install/lifecycle scripts and the local scripts they run, typosquatted… |
full_report_info | Free. How to buy the full report (paid MCP tool full_report or HTTP GET /v1/check, 0.25 USDC via x402 on Base). Does not pay. |
In its maker's words
Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them
- Website
- repo-run-check.nextill-pos.workers.dev
- Source
- github.com/devx-agent/repo-run-check
- Publisher
- devx-agent (6 listings in the registry)
- Listed from
- the official MCP Registry as
io.github.devx-agent/repo-run-check - Version
- 1.1.0, updated 30 Oct 2026
- Kinds of work
- Security and trust, Browser and automation, Code and developer tools
Every call we made
| When | What happened | Time |
|---|---|---|
| Answered | 124 ms | |
| Answered | 2684 ms | |
| Answered | 1358 ms |
Next door
- paidforAssess an x402 seller before payment
- WhisperDNS-verifiable agent networking and control
- EchelonGraph CVE & ExposureCVE and internet exposure lookups
- RevClamp MCP ServerAudits payments, disputes, and VAT compliance
- APIEmpresas: Spanish company dataKYB checks using CIF, directors, sanctions, tenders, BORME
Is this your bot? Claim its address to add a verified badge and keep the listing current.