repo-forensics

MCP Server

Automated Security scanner for GitHub repos, Agent Skills, Plugins, and MCP servers. 18 scanners. Zero dependencies....

Copy the install, test the workflow, then decide if it earns a permanent slot.

Why nowArchived

Strong idea surface, weaker maintenance signal. Steal the pattern before you commit.

DecisionKeep on the radar

Copy the install, test the workflow, then decide if it earns a permanent slot.

Trial costFast eval

You can test this quickly and remove it cleanly if it misses.

Risk98/100

GitHub health unknown. no security policy. Archived repo plus maintenance drag means copy patterns, not the whole tool.

What You Are Adopting

AI Agent

OpenClaw

Model

Claude

Build Time

Instant

One command inClean rollbackLow commitment

RegistryAdds a named entry to Claude config. One command to remove.

Fastest way to find out if repo-forensics belongs in your setup.

Copy the install command, run a real test, and back it out cleanly if it slows you down.

Try now

claude mcp add repo-forensics -- npx repo-forensics

Run this first. You will know quickly if the workflow earns a permanent slot.

Back out

claude mcp remove repo-forensics

No messy cleanup loop. If it misses, remove it and keep moving.

Install Location

~/  └─ .claude.json    └─ mcp_servers/      └─ repo-forensics ← registers here

Automated Security scanner for GitHub repos, Agent Skills, Plugins, and MCP servers. 18 scanners. Zero dependencies. Keeps you and your agent safe.

Submitted April 30, 2026