repo-forensics
Offline security scanner for AI-agent repos, skills, plugins, and MCP servers.
What is repo-forensics?
repo-forensics is an AI Security tool. Offline security scanner for AI-agent repos, skills, plugins, and MCP servers. repo-forensics is free to use. It is available on Windows, macOS and Linux. It is aimed at developers, security teams and ai researchers.
Offline security scanner for AI-agent repos, skills, plugins, and MCP servers. It provides continuous protection through hooks and detects vulnerabilities in AI-agent plugins, skills, and MCP servers. The tool includes 28 scanners and a correlation engine for comprehensive analysis.
Built for developers, security teams and ai researchers.
Key capabilities
Features
Offline Security Scanner
Scans AI-agent repos, skills, plugins, and MCP servers for security issues.
Continuous Protection
Correlation Engine
CVE + CISA KEV Auto-Enrichment
Forensify Audit
Audits the agent stack for security compliance.
Runtime Behavior Prediction
Battle-Tested
Tested against real attacks to ensure effectiveness.
Use cases
- Scan AI-agent repos for security vulnerabilities
- Audit AI-agent plugins for compliance
- Monitor MCP servers for threats
- Predict runtime behavior of AI agents
Who it's for
Pros & cons
Pros
- Free (open source)
Cons
No documented limitations yet.
Pricing
Free.
Developer & API
Open source· 185 stars· 29 forks
FAQ
What is repo-forensics?
repo-forensics is an AI Security tool. Offline security scanner for AI-agent repos, skills, plugins, and MCP servers. Offline security scanner for AI-agent repos, skills, plugins, and MCP servers. It provides continuous protection through hooks and detects vulnerabilities in AI-agent plugins, skills, and MCP servers. The tool includes 28 scanners and a correlation engine for comprehensive analysis.
Is repo-forensics free?
Yes, repo-forensics is free to use.
How much does repo-forensics cost?
repo-forensics is free to use.
What platforms does repo-forensics support?
repo-forensics is available on Windows, macOS and Linux.
Who should use repo-forensics?
repo-forensics is built for developers, security teams and ai researchers. Common uses: scan AI-agent repos for security vulnerabilities, audit AI-agent plugins for compliance, monitor MCP servers for threats and predict runtime behavior of AI agents.
Is repo-forensics open source?
Yes, repo-forensics is open source.
What are the best alternatives to repo-forensics?
Similar tools on AiByts include Lakera Guard, CrowdStrike Charlotte AI, Prediction Guard, Koreshield and Axari.
Details are compiled from repo-forensics's website and public sources, last verified Oct 3, 2026. Features and pricing change — confirm on the official site before you buy.
Try repo-forensics
Free
Tags
- Security Scanner
- AI Security
Comments
Sign in to join the discussion.