Market/Version control/Repo Security Scanner — Malicious Code & Supply Chain

MCP server: One MCP server. Repo Security Scanner — Malicious Code & Supply Chain

MCP server: One MCP server.

Repo Security Scanner — Malicious Code & Supply Chain

Name: Repo Security Scanner — Malicious Code & Supply Chain
Author: eltociear

@eltociearMCP server · External

Audit GitHub repos for malicious and supply-chain code before you depend on them.

Version controlv0.1.0

Freeno charge per call

One address for any MCP client. Your key stays in your Odel vault.

Safety · AI8%Low risk
Does · AIReadsOnly looks things up
ConnectRemote · API keyStreamable HTTP
PopularityNo stars yetUpdated 15 Aug 2026
StatusAll clearAnswered Odel on 26 Sep

Overview Tools Trust Requirements Details Similar

What it does

Reads
Writes
High impact

At most: only reads or looks up information.

What it costs

Free

Odel charges nothing per call. The publisher may charge for its own service.

Tools

None listed · checked 26 Sep 2026

Odel could not list its tools without signing in.

Try it in the Inspector

No README yet. What Odel knows about this module is on the right.

Checked by Odel

Endpoint answered on 26 Sep 2026
Registry verified the namespace io.github.eltociear

Assessed by AIJev

Harmful: 8%
First-party: 43%
High impact: 9%
Adult content: 1%

Read from the listing and README on 27 Sep 2026. AI can make mistakes: a guide, not a check.

Requirements

Runs: Remote, on mcp.apify.com
Transport: Streamable HTTP
Sign-in: API key
Credentials: token
Clients: Any MCP client

https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner

The publisher’s server itself; Odel doesn’t run it. Added to your modules, Odel fronts it with one address.

Details

Version: 0.1.0
Updated: 15 Aug 2026
Registry name: io.github.eltociear/repo-security-scanner

apify.com
Registry listing

Similar modules

Browse Version control

MCP server: One MCP server.
Codebase MemoryRun by its publisher: served from their own domain, namespace checked by the registry.
@deusdata · External46,322 GitHub stars.
Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.
8% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
8% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
8% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
GitHub
@github · External33,457 GitHub stars.
Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.
6% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.Free to use.
MCP server: One MCP server.
RepomixRun by its publisher: served from their own domain, namespace checked by the registry.
@yamadashy · External28,802 GitHub stars.
Pack local or remote codebases into AI-friendly files that LLMs and coding agents can read or search
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
GitDiagramRun by its publisher: served from their own domain, namespace checked by the registry.
@gitdiagram · External17,925 GitHub stars.
Architecture diagrams, explanations and Mermaid source for public GitHub repositories.
4% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.
4% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.
4% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.
MCP server: One MCP server.
RepowiseRun by its publisher: served from their own domain, namespace checked by the registry.
@repowise · External7,547 GitHub stars.
Codebase intelligence for AI coding agents — graph, git history, docs, decisions, code health.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
SemRun by its publisher: served from their own domain, namespace checked by the registry.
@ataraxy-labs · External3,389 GitHub stars.
Entity-level code intelligence: semantic diff, impact analysis, blame, and context for AI agents
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
SocratiCode
@giancarloerra · External3,336 GitHub stars.
MCP server for enterprise local codebase indexing, semantic search, and code dependency graphs.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
jCodemunch MCPRun by its publisher: served from their own domain, namespace checked by the registry.
@jgravelle · External2,759 GitHub stars.
Token-efficient code exploration via tree-sitter AST parsing. 70+ languages, 86-99% token savings.
4% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
4% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
4% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.

MCP server: One MCP server.
URL to Clean Markdown for LLMs & RAG
@eltociear · External
Fetch URLs and return clean Markdown for RAG — nav, ads and boilerplate stripped.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; it needs your API key.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; it needs your API key.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; it needs your API key.Free to use.
MCP server: One MCP server.
Tokenguard
@eltociear · External1 GitHub stars.
Real-world data for agents: air quality, geocoding, quakes, holidays, web search
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.
MCP server: One MCP server.
Contract Guard
@eltociear · External1 GitHub stars.
EVM contract/token risk check + ERC20 approval (proxy, EIP-7702, unlimited-allowance). Zero deps.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.Free to use.
MCP server: One MCP server.
Secrets Audit
@eltociear · External1 GitHub stars.
Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.Free to use.
MCP server: One MCP server.
Skill Audit
@eltociear · External5 GitHub stars.
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.A remote server; no sign-in.Free to use.