# Repo Forensics > An offline scanner your agent runs before you trust a repo, skill, plugin or MCP server, and to audit what you already installed. Repo Forensics is Alex Greenshpun's local security scanner for the AI-agent ecosystem, packaged as Agent Skills. Point your agent at a repository, skill, plugin or MCP server and it runs a set of scanners, correlates what they find, and returns a severity-ranked verdict before that code touches your machine. What its skills teach your agent - repo-forensics: audit a repo, skill, plugin or MCP server for prompt injection, MCP tool poisoning, hidden Unicode, credential exposure and exfiltration paths, malicious install hooks, known-malicious packages, CVEs and CISA KEV exposure, and traces of past supply-chain attacks - forensify: audit the agent stack you already have (installed skills and plugins, MCP server configs, hooks, memory and settings files, and credential file permissions) across Claude Code, Codex, OpenClaw and NanoClaw - Correlate findings into compound threats (an environment read plus an outbound POST becomes data exfiltration) and sort them into BLOCK, WARN and INFO tiers - Report as text, JSON or SARIF for the GitHub Security tab, with exit codes for CI How it works - It's pure Python with no dependencies, and scanning runs on your machine. The only network lookups are package names and versions (for CVEs and signatures) and links the scanned repo points to; --offline turns those off. - Add the skills to your agent's skills folder; the maker documents Claude Code, Codex, OpenClaw, NanoClaw and Cursor. For automatic scanning of every clone and install, the maker's Claude Code and Codex plugin adds hooks on top. - Forensify is read-only: it doesn't fix or quarantine anything, and it reads credential file metadata, never the values. Good to know - Licensed PolyForm Noncommercial 1.0.0: free for personal, research and education use and for very small businesses under the maker's written permission; larger commercial use needs a license from the maker. - A community project by Alex Greenshpun (alexgreensh). - Type: Skill - Made by: alexgreensh - Category: Security - Formats: Skills - Version: latest - Website: https://github.com/alexgreensh/repo-forensics - Source: https://github.com/alexgreensh/repo-forensics/tree/HEAD/plugins/repo-forensics - Page: https://pluginboard.ai/skills/repo-forensics ## Works with - ChatGPT - Claude - Gemini - GitHub Copilot - Cursor - Claude Code - Codex - Antigravity - Gemini CLI - Replit - OpenClaw - OpenCode - Hermes Agent ## Install ### ChatGPT In ChatGPT: Download the repo-forensics folder and zip it, then Plugins → Skills → Create → Upload from your computer. Business and Enterprise plans. View the skills on GitHub: https://github.com/alexgreensh/repo-forensics/tree/HEAD/plugins/repo-forensics ### Claude In Claude (web or desktop): Download each skill’s folder and zip it, then upload them one at a time in Customize → Skills. View the skills on GitHub: https://github.com/alexgreensh/repo-forensics/tree/HEAD/plugins/repo-forensics ### Gemini In Gemini: Download the repo-forensics folder, then at gemini.google.com click Customize → Skills → Create → Upload and pick the folder (or a .zip of it). View the skills on GitHub: https://github.com/alexgreensh/repo-forensics/tree/HEAD/plugins/repo-forensics ### GitHub Copilot Copy all 2 skills, in your terminal: ```shell npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/forensify ~/.copilot/skills/forensify npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/repo-forensics ~/.copilot/skills/repo-forensics ``` View the skills on GitHub: https://github.com/alexgreensh/repo-forensics/tree/HEAD/plugins/repo-forensics ### Cursor Copy all 2 skills, in your terminal: ```shell npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/forensify ~/.cursor/skills/forensify npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/repo-forensics ~/.cursor/skills/repo-forensics ``` View the skills on GitHub: https://github.com/alexgreensh/repo-forensics/tree/HEAD/plugins/repo-forensics ### Claude Code Copy all 2 skills, in your terminal: ```shell npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/forensify ~/.claude/skills/forensify npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/repo-forensics ~/.claude/skills/repo-forensics ``` View the skills on GitHub: https://github.com/alexgreensh/repo-forensics/tree/HEAD/plugins/repo-forensics ### Codex Copy all 2 skills, in your terminal: ```shell npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/forensify ~/.agents/skills/forensify npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/repo-forensics ~/.agents/skills/repo-forensics ``` View the skills on GitHub: https://github.com/alexgreensh/repo-forensics/tree/HEAD/plugins/repo-forensics ### Antigravity In Antigravity: Copy the repo-forensics folder into ~/.gemini/config/skills (Antigravity app and IDE) or ~/.gemini/antigravity-cli/skills (Antigravity CLI). View the skills on GitHub: https://github.com/alexgreensh/repo-forensics/tree/HEAD/plugins/repo-forensics ### Gemini CLI Copy all 2 skills, in your terminal: ```shell npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/forensify ~/.gemini/skills/forensify npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/repo-forensics ~/.gemini/skills/repo-forensics ``` View the skills on GitHub: https://github.com/alexgreensh/repo-forensics/tree/HEAD/plugins/repo-forensics ### Replit Copy all 2 skills, in your terminal: ```shell npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/forensify .agents/skills/forensify npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/repo-forensics .agents/skills/repo-forensics ``` View the skills on GitHub: https://github.com/alexgreensh/repo-forensics/tree/HEAD/plugins/repo-forensics ### OpenClaw Copy all 2 skills, in your terminal: ```shell npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/forensify ~/.openclaw/skills/forensify npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/repo-forensics ~/.openclaw/skills/repo-forensics ``` View the skills on GitHub: https://github.com/alexgreensh/repo-forensics/tree/HEAD/plugins/repo-forensics ### OpenCode Copy all 2 skills, in your terminal: ```shell npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/forensify ~/.config/opencode/skills/forensify npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/repo-forensics ~/.config/opencode/skills/repo-forensics ``` View the skills on GitHub: https://github.com/alexgreensh/repo-forensics/tree/HEAD/plugins/repo-forensics ### Hermes Agent Copy all 2 skills, in your terminal: ```shell npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/forensify ~/.hermes/skills/forensify npx -y degit alexgreensh/repo-forensics/plugins/repo-forensics/skills/repo-forensics ~/.hermes/skills/repo-forensics ``` View the skills on GitHub: https://github.com/alexgreensh/repo-forensics/tree/HEAD/plugins/repo-forensics --- From Pluginboard (https://pluginboard.ai).