Agent Plugins Marketplace
← All plugins

repo-forensics

v2.14.13

Audit untrusted repos before they touch your agent. Fully local, zero dependencies, zero telemetry.

CodexClaude Code2 Skills

By Alex GreenshpunLicense: PolyForm-Noncommercial-1.0.0188 GitHub starsUpdated 3 weeks ago

Directory evidence

Runtimes
Codex and Claude Code
Parsed components
2 skill or MCP entries
Source updated
Sep 27, 2026
Manifest status
Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install repo-forensics for Codex and Claude Code

Installs for the current user
codex plugin marketplace add alexgreensh/repo-forensics
codex plugin marketplace upgrade alexgreensh-repo-forensics
codex plugin add repo-forensics@alexgreensh-repo-forensics

Paste and run these commands in a terminal with Codex. They add and refresh the alexgreensh-repo-forensics catalog, then install this plugin.

Compatibility: the page URL and API slug “repo-forensics-2” remain stable.

  • Codex: repo-forensics-2@agent-plugin-marketplace → repo-forensics@alexgreensh-repo-forensics

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually
git clone https://github.com/alexgreensh/repo-forensics

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/repo-forensics/.

Plugin files

plugins/repo-forensics/
├── .codex-plugin/plugin.json
├── .claude-plugin/plugin.json
├── skills/forensify/SKILL.md
└── skills/repo-forensics/SKILL.md

Included Skills2

forensifyskills/forensify/SKILL.md

Cross-agent self-inspection of your AI-agent stack. Audits skills, MCP servers, hooks, plugins, commands, credentials, and memory files across Claude Code, Codex, OpenClaw, and NanoClaw. Produces a structured inventory and narrative briefing with cross-ecosystem risk analysis. Use when the user asks to audit their own setup, check what they have installed, review their agent stack security posture, or understand cross-tool interactions. Use when a user has accumulated skills/plugins/MCP servers over time and wants visibility into their attack surface. Use after installing new skills or plugins. Do NOT use for vetting external code before install (that is repo-forensics). Do NOT use for incident response during active attacks. Do NOT use for fixing or patching vulnerabilities (forensify is read-only).

repo-forensicsskills/repo-forensics/SKILL.md

Security forensics for git repos, AI skills, and MCP servers. Audits dependencies, detects prompt injection, credential theft, runtime dynamism, manifest drift, known CVEs, CISA KEV (actively exploited) vulns, and 2026 attack patterns. Not for fixing vulnerabilities or pentesting.

Plugin manifests2

plugins/repo-forensics/.codex-plugin/plugin.json
{
  "name": "repo-forensics",
  "version": "2.14.13",
  "description": "Audit untrusted repos before they touch your agent. Fully local, zero dependencies, zero telemetry.",
  "skills": "./skills/",
  "hooks": "./hooks/hooks.json",
  "interface": {
    "displayName": "Repo Forensics",
    "shortDescription": "Security scanner for AI agent plugins, skills, and MCP servers.",
    "longDescription": "Audit any repo, skill, MCP server, or plugin before installation. 28 scanners detect supply chain attacks, prompt injection, credential theft, and runtime exploitation. Zero dependencies, fully offline, nothing uploaded.",
    "developerName": "Alex Greenshpun",
    "category": "Security",
    "capabilities": [
      "Supply chain attack detection",
      "Prompt injection scanning",
      "Credential theft detection",
      "Runtime behavior prediction",
      "CVE + CISA KEV live scanning"
    ],
    "websiteURL": "https://github.com/alexgreensh/repo-forensics",
    "defaultPrompt": [
      "Run repo-forensics on this project and show me the security findings.",
      "Scan this repo for supply chain attacks and prompt injection.",
      "Audit this MCP server before I install it."
    ],
    "brandColor": "#DC2626"
  }
}
plugins/repo-forensics/.claude-plugin/plugin.json
{
  "name": "repo-forensics",
  "version": "2.14.13",
  "description": "Offline security scanner for AI-agent repos, skills, plugins, and MCP servers",
  "author": {
    "name": "Alex Greenshpun",
    "url": "https://linkedin.com/in/alexgreensh"
  },
  "homepage": "https://github.com/alexgreensh/repo-forensics",
  "repository": "https://github.com/alexgreensh/repo-forensics",
  "license": "PolyForm-Noncommercial-1.0.0",
  "keywords": [
    "security",
    "agent-security",
    "supply-chain",
    "mcp",
    "claude-code",
    "codex",
    "skills",
    "plugins",
    "forensics",
    "scanner"
  ]
}

For maintainers

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[repo-forensics on Agent Plugins Marketplace](https://pluginsmp.com/plugins/repo-forensics-2)