Repo forensics
Offline security scanner for AI-agent repos, skills, plugins, and MCP servers.From the repository description
npx -y skills add alexgreensh/repo-forensics --skill repo-forensicsAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
What ships with it: 170 files
3229.3 KB alongside SKILL.md, 139 of them executable
data/
- compromised_versions.json23.6 KB
- README.md1.3 KB
- rule_ids.csv33.3 KB
- rulepacks/dead_anchors.json9.0 KB
- rulepacks/.gitkeep221 B
- rulepacks/mcp_security.json29.3 KB
- rulepacks/runtime_dynamism.json38.0 KB
- rulepacks/sast.json79.3 KB
- rulepacks/secrets.json30.4 KB
- rulepacks/shared.json4.4 KB
- rulepacks/skill_threats.json90.9 KB
- yara/cryptominers.yar1.8 KB
- yara/hacktools.yar2.2 KB
- yara/malware.yar2.2 KB
- yara/manifest.json8.0 KB
- yara/webshells.yar2.5 KB
references/
- mcp-attack-patterns.md8.7 KB
- research_sources.md8.0 KB
- threat_patterns.md20.3 KB
scripts/
- adjudication_bridge.pyruns1.0 KB
- adjudication.pyruns14.6 KB
- aggregate_json.pyruns44.5 KB
- auto_scan.pyruns23.7 KB
- _context_gate.pyruns20.5 KB
- corpus_sync.pyruns10.0 KB
- dast_sandbox.sb1.2 KB
- dead_anchors_extract.pyruns14.8 KB
- dead_anchors_probe.pyruns27.1 KB
- _ed25519.pyruns5.1 KB
- forensics_core.pyruns118.5 KB
- gen_rule_ids.pyruns8.3 KB
- ioc_manager.pyruns29.9 KB
- parse_pnpm_lock.pyruns7.9 KB
- pre_scan.pyruns8.5 KB
- _pyc_unmarshal.pyruns5.3 KB
- refresh_controller.pyruns45.0 KB
- refresh_threat_dbs.pyruns17.4 KB
- checksums.json9.2 KB
- checksums.json.sig64 B
- .gitignore193 B
130 more files not listed here. See all 170 in the repository.