repo-agent-scan

sunxiayi/repo-agent-instruction-security-scan

Local deterministic scanner for agent skills and repository instruction files (SKILL.md, AGENTS.md, CLAUDE.md, and IDE rules), with evidence-anchored findings, SARIF, pre-commit, and GitHub Action support

JavaScript MIT

View on GitHub → Find it in the atlas

Install

scoop bucket add repoagentkit https://github.com/sunxiayi/scoop-bucket scoop install repoagentkit/repo-agent-scan

Repository reader

Explore before you clone

Read the project’s README, skills and supporting Markdown here. Rendered view is shown first; source is one click away when you need the exact text.

Fetched from GitHub
Open on GitHub
Loading the project’s README…

Public files are loaded on demand from the repository. The atlas does not copy or modify them.

Screenshot

Screenshot or social card for repo-agent-scan
GitHub's social card — no screenshot was found for this project, fetched from source rather than copied into this repository.

Platform support

Derived from the project's own README, install route, CI configuration and release assets — not from running it.
PlatformRuns hereOn what evidence
WindowsYesStated in the project's own README, install route, CI config or release assets.
WSL2LikelyInferred from the language or runtime. Nothing in the project says so.
macOSLikelyInferred from the language or runtime. Nothing in the project says so.
LinuxLikelyInferred from the language or runtime. Nothing in the project says so.
DockerNoNo evidence of support anywhere in the project.

Where it came from

Named by 1 of the 39 lists the atlas merges.

  • Agent Skill Security

How it is classified

One topic, 5 harnesses. Each link is a prerendered page of everything else in that slice.

Sandbox, Security & GovernanceClaude CodeClaude / AnthropicGemini / GoogleGitHub CopilotCursor

Related in Sandbox, Security & Governance

Closest first — projects that plug into the same harnesses, then the ones the most lists agreed on.

  • Node9node9-ai/node9-proxySecurity and governance layer that checks every tool call from coding agents and MCP servers before it runs: credential jail, secret and PII…
  • Dippyldayton/Dippyby Lily Dayton - Auto-approve safe bash commands using AST-based parsing, while prompting for destructive operations. Solves permission fatigue…
  • Gryphsafedep/gryphby SafeDep - Gryph is a security layer for AI coding agents. It hooks into Claude Code and enforces YAML policy rules that block, warn, or guide…
  • AI Agent Safety Starter Packel-zachariah/ai-agent-safety-starter-packFree repo preflight scanner for Claude Code, Codex, Cursor, and other AI coding-agent runs that flags agent instructions, MCP config, risky shell…
  • compassdshakes/compassby dshakes - Developer-grade Claude Code + Codex configuration: cost-tiered subagents, workflow commands, guardrail hooks, MCP parity, and an…
  • gate.catBGMLAI/gate.catDeterministic, fail-closed action veto for AI coding agents that blocks irreversible shell commands (rm -rf, DROP TABLE, terraform destroy) and…
  • itscooleric/clideitscooleric/clideDockerized agentic terminal - Claude Code, Copilot, Codex CLI in one sandboxed container with egress firewall and web terminal
  • libops/cli-sandboxlibops/cli-sandboxDocker sandbox container for Claude Code, Codex, Gemini CLI, and OpenCode