Is Expo safe? Security scan and tools

Log in / Join

Expo

By expo

PluginClaude pluginsDeveloper tools Scan passed

Get

What we checked

Pinned tool set

History

Every scan of this listing, newest first.

Every rescan is logged, even when nothing changed.

When a server changes its tools

Nothing new reaches your agent until a person has looked at it.

1Ask the live serverWe connect the way your agent does and list its tools. We never call one.
2Pin every toolEach tool’s name, description and input schema is hashed, so any change shows up as a diff.
3Read it like an attackerRules look for hidden instructions, invisible text, credential grabs, download-and-run and data leaving.
4Hold what failsFlagged listings are taken down until a person reviews them, new versions included.

Scanned on every change, and again when our rules improve.

What we checked

Pinned tool set

History

Every scan of this listing, newest first.

Every rescan is logged, even when nothing changed.

Browse plugins, skills and use-case recipes by category.

All categories

Expo

By expo

PluginClaude pluginsDeveloper tools Scan passed

Get

Passed

Safe to install in every agent it supports. Claude plugins.

Download report (JSON)

Last scan: 6 h ago
Version scanned: latest
Tools pinned: —
Tool changes: —

What we checked

We read the listing and its manifest for latest. 6 checks, no findings.

Hidden instructionsNothing tells the agent to override its rules or keep things from you.
Passed
Invisible textNo invisible or direction-flipping characters.
Passed
Access to credentialsNo reaching for SSH keys, cloud credentials, wallets or the keychain.
Passed
Downloads and runs codeNo piping downloads into a shell or running encoded payloads.
Passed
Sends data outNo uploads of credential files or catch-all collection endpoints.
Passed
Leaked secretsNo API keys, tokens or private keys published by mistake.
Passed

Pinned tool set

What the live server says it can do.

This one runs on your machine, so we can’t ask it for its tools without running it. We scan its listing and manifest instead.

What we checked

Pinned tool set

History

Every scan of this listing, newest first.

Oct 26, 2026 · ChangedVersion latest · no findings
Passed
Oct 26, 2026 · ChangedVersion latest · no findings
Passed
Oct 26, 2026 · ChangedVersion latest · no findings
Passed
Oct 25, 2026 · First scanVersion latest · no findings
Passed

Every rescan is logged, even when nothing changed.

History

Every scan of this listing, newest first.

Every rescan is logged, even when nothing changed.

When a server changes its tools

Nothing new reaches your agent until a person has looked at it.

1Ask the live serverWe connect the way your agent does and list its tools. We never call one.
2Pin every toolEach tool’s name, description and input schema is hashed, so any change shows up as a diff.
3Read it like an attackerRules look for hidden instructions, invisible text, credential grabs, download-and-run and data leaving.
4Hold what failsFlagged listings are taken down until a person reviews them, new versions included.

Scanned on every change, and again when our rules improve.

Passed

Safe to install in every agent it supports. Claude plugins.

Download report (JSON)

Last scan: 6 h ago
Version scanned: latest
Tools pinned: —
Tool changes: —

What we checked

We read the listing and its manifest for latest. 6 checks, no findings.

Hidden instructionsNothing tells the agent to override its rules or keep things from you.
Passed
Invisible textNo invisible or direction-flipping characters.
Passed
Access to credentialsNo reaching for SSH keys, cloud credentials, wallets or the keychain.
Passed
Downloads and runs codeNo piping downloads into a shell or running encoded payloads.
Passed
Sends data outNo uploads of credential files or catch-all collection endpoints.
Passed
Leaked secretsNo API keys, tokens or private keys published by mistake.
Passed

Pinned tool set

What the live server says it can do.

This one runs on your machine, so we can’t ask it for its tools without running it. We scan its listing and manifest instead.

History

Every scan of this listing, newest first.

Oct 26, 2026 · ChangedVersion latest · no findings
Passed
Oct 26, 2026 · ChangedVersion latest · no findings
Passed
Oct 26, 2026 · ChangedVersion latest · no findings
Passed
Oct 25, 2026 · First scanVersion latest · no findings
Passed

Every rescan is logged, even when nothing changed.

What we checked

Pinned tool set

History

About

Ratings and reviews

Expo

What we checked

Pinned tool set

History

When a server changes its tools

What we checked

Pinned tool set

History

Browse plugins, skills and use-case recipes by category.

Expo

What we checked

Pinned tool set

What we checked

Pinned tool set

History

History

When a server changes its tools

What we checked

Pinned tool set

History

What we checked

Pinned tool set

History

About

Ratings and reviews

Security of Expo

What we checked

Pinned tool set

History

When a server changes its tools

What we checked

Pinned tool set

History

Browse plugins, skills and use-case recipes by category.

Security of Expo

What we checked

Pinned tool set

What we checked

Pinned tool set

History

History

When a server changes its tools

What we checked

Pinned tool set

History