{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:23:12.270Z","url":"https://verifymcp.io/servers/devx-agent-repo-run-check/devx-repo-check","markdownUrl":"https://verifymcp.io/servers/devx-agent-repo-run-check/devx-repo-check.md","server":{"slug":"devx-agent-repo-run-check","name":"Repo Run Check","registryName":"io.github.devx-agent/repo-run-check","description":"Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"devx-repo-check","type":"npm","identifier":"devx-repo-check","withdrawn":false,"url":"https://verifymcp.io/servers/devx-agent-repo-run-check/devx-repo-check","version":"1.1.0","transport":"stdio","scoredAt":"2026-11-05T10:11:07.881Z"},"score":{"total":63,"tier":"medium","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":63},{"date":"2026-11-04","total":63},{"date":"2026-11-03","total":63},{"date":"2026-11-02","total":63},{"date":"2026-11-01","total":63},{"date":"2026-10-31","total":63},{"date":"2026-10-30","total":48}]},"categories":[{"name":"Supply Chain Security","score":81,"verdict":"fail","reasons":["No malware found by supply-chain analysis.","CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available.","No install/post-install scripts declared.","30 of 93 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.direct","args":{"package":"zod","version":"3.25.76","severity":"high"}},{"code":"installscript.none","args":{}},{"code":"dephealth.assessed","args":{"deps":"93","unhealthy":"30"}}]},{"name":"Provenance & Transparency","score":45,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 5 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"5"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":65,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 1035 tokens (~345/item across 3 items; 3 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"345","items":"3","tools":"3","tokens":"1035","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"codes":[{"code":"stability.insufficient_history","args":{}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 3 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"3"}},{"code":"toolsafety.manipulation_clean","args":{"units":"4","judged":"4"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"malware":[],"components":[{"slug":"repo-run-check","type":"remote","identifier":"https://repo-run-check.nextill-pos.workers.dev/mcp","withdrawn":false,"score":68,"current":false,"url":"https://verifymcp.io/servers/devx-agent-repo-run-check/repo-run-check","markdownUrl":"https://verifymcp.io/servers/devx-agent-repo-run-check/repo-run-check.md"},{"slug":"devx-repo-check","type":"npm","identifier":"devx-repo-check","withdrawn":false,"score":63,"current":true,"url":"https://verifymcp.io/servers/devx-agent-repo-run-check/devx-repo-check","markdownUrl":"https://verifymcp.io/servers/devx-agent-repo-run-check/devx-repo-check.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"devx-repo-check"},{"label":"Version","value":"1.1.0"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"check_command","title":"Check a shell command before running it","description":"Statically scans one shell, bash or PowerShell command (or a short script) for malware-installer patterns before anyone runs it. Use it whenever an agent is about to run a command copied from a README, issue, gist, website, chat or AI answer, and for one-liners like curl | sh or iwr | iex. It flags download-and-execute (curl/wget piped to a shell, iwr/irm piped to iex) from unknown hosts, encoded or obfuscated PowerShell, Windows LOLBins (mshta, certutil, rundll32...), commands that disable antivirus or Defender, and known malware domains. Well-known installers (rustup, Foundry, Anza and similar) are reported as info only. Offline: nothing is sent anywhere and the command is never executed. Returns verdict: no_red_flags (nothing matched; not proof of safety), review_before_running (at least one warning: read the flagged lines first) or dangerous (download-and-execute, encoded payloads, known malware hosts and similar: do not run), plus findings (level, code, message, line, evidence). For a whole cloned folder use check_local_repo. For a GitHub repo that is not cloned yet use check_repo.","inputs":[{"name":"cmd","type":"string","required":true,"description":"The exact command or script text you plan to run, unmodified (1-20000 characters). Multi-line input is fine; each line is checked."}],"outputs":[{"name":"advice","type":"string","required":true,"description":null},{"name":"findings","type":"array","required":true,"description":null},{"name":"verdict","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":301},{"name":"check_local_repo","title":"Check a cloned repo folder before installing it","description":"Statically scans a repository folder on the machine running this MCP server before you run npm install, pip install, make or its setup steps. It reads only these files if present (each up to 300 KB): README.md, package.json, install.sh, setup.sh, setup.py, requirements.txt, .vscode/tasks.json and Makefile. It looks for npm lifecycle scripts (preinstall/postinstall) that download or run code, typosquatted or URL dependencies, setup.py side effects, VS Code tasks that autorun on folder open, and dangerous commands in the README and scripts. Read-only: it never executes anything, never writes files and sends nothing over the network. Other source files are not inspected, so this is not a full malware scan. Returns verdict: no_red_flags (nothing matched; not proof of safety), review_before_running (at least one warning: read the flagged lines first) or dangerous (download-and-execute, encoded payloads, known malware hosts and similar: do not run), plus advice, files_checked, findings (level, code, message, file, line, evidence) and install_commands found in README code blocks. Use check_repo instead when the repo is only on GitHub and not cloned yet.","inputs":[{"name":"path","type":"string","required":true,"description":"Path to the repo's root folder on this machine, absolute or relative to the server's working directory. In Docker, the folder must be mounted into the container."}],"outputs":[{"name":"advice","type":"string","required":true,"description":null},{"name":"files_checked","type":"array","required":true,"description":null},{"name":"findings","type":"array","required":true,"description":null},{"name":"install_commands","type":"array","required":true,"description":null},{"name":"path","type":"string","required":true,"description":null},{"name":"verdict","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":300},{"name":"check_repo","title":"Check a public GitHub repo's install steps","description":"Fetches a public GitHub repo's README (raw.githubusercontent.com, up to 300 KB) and scans its install instructions before you clone it or follow them. Use it when a user or agent is told to 'clone this repo and run the setup' or is evaluating a starter kit, trading bot, wallet tool or MCP server from GitHub. Free and read-only: one unauthenticated HTTPS request to GitHub; nothing is cloned or executed. Only the README is checked here. The optional paid hosted check (https://repo-run-check.nextill-pos.workers.dev/v1/check, 0.005 USDC via x402 on Base) also reads package.json install scripts, dependencies, setup files and repo metadata such as age and fake-star signals. This tool does not pay for it; it only returns its URL. Returns verdict: no_red_flags (nothing matched; not proof of safety), review_before_running (at least one warning: read the flagged lines first) or dangerous (download-and-execute, encoded payloads, known malware hosts and similar: do not run), plus repo, url, advice, files_checked, findings, install_commands, tier, full_report (URL of the paid check) and full_report_price_usdc. Errors if the repo is private, renamed or missing. If the repo is already cloned, check_local_repo covers more files at no cost.","inputs":[{"name":"repo","type":"string","required":true,"description":"Public GitHub repository as owner/repo or https://github.com/owner/repo (a trailing .git or path is fine). Other hosts are not supported."}],"outputs":[{"name":"advice","type":"string","required":true,"description":null},{"name":"files_checked","type":"array","required":true,"description":null},{"name":"findings","type":"array","required":true,"description":null},{"name":"full_report","type":"string","required":true,"description":null},{"name":"full_report_price_usdc","type":"number","required":true,"description":null},{"name":"install_commands","type":"array","required":true,"description":null},{"name":"repo","type":"string","required":true,"description":null},{"name":"tier","type":"string","required":true,"description":null},{"name":"url","type":"string","required":true,"description":null},{"name":"verdict","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":328}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T10:11:07.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":null,"reasonLabel":null,"discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[{"id":"GHSA-mrhx-c7xc-m3w5","cve":"CVE-2023-54404","severity":"high","fixAvailable":true}],"vulnerabilitiesTotal":1,"dependencies":{"nodes":93,"partial":false,"deprecated":null,"stale":30,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-30","recent":[{"id":"chg_01a19170-03d1-7d42-999d-15efa1cf2b79","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/devx-agent-repo-run-check/devx-repo-check#chg-chg_01a19170-03d1-7d42-999d-15efa1cf2b79"},{"id":"chg_01a19170-03d2-73b7-8ded-b17dd3ed37a3","kind":"score.total_changed","summary":"Trust score (48 → 63)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/devx-agent-repo-run-check/devx-repo-check#chg-chg_01a19170-03d2-73b7-8ded-b17dd3ed37a3"},{"id":"chg_01a18ec0-e028-7e04-a391-80c38e3917ad","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/devx-agent-repo-run-check/devx-repo-check#chg-chg_01a18ec0-e028-7e04-a391-80c38e3917ad"},{"id":"chg_01a18b64-8836-78fd-a622-bded1dd5faf2","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/devx-agent-repo-run-check/devx-repo-check#chg-chg_01a18b64-8836-78fd-a622-bded1dd5faf2"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/devx-agent-repo-run-check/devx-repo-check/changelog.json"},"links":{"html":"https://verifymcp.io/servers/devx-agent-repo-run-check/devx-repo-check","markdown":"https://verifymcp.io/servers/devx-agent-repo-run-check/devx-repo-check.md","changelogJson":"https://verifymcp.io/servers/devx-agent-repo-run-check/devx-repo-check/changelog.json","changelogRss":"https://verifymcp.io/servers/devx-agent-repo-run-check/devx-repo-check.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/devx-repo-check"},{"label":"Socket report","href":"https://socket.dev/npm/package/devx-repo-check"},{"label":"Repository","href":"https://github.com/devx-agent/repo-run-check"},{"label":"Website","href":"https://repo-run-check.nextill-pos.workers.dev/"}]}}