forensify
Cross-agent self-inspection of your AI-agent stack. Audits skills, MCP servers, hooks, plugins, commands, credentials, and memory…
@alexgreenshInstall SkillSecurity
Skill
/benign
A Claude Code skill that performs automated code review on the current working repository.
Claude Code
$ npx -y skills add alexgreensh/repo-forensics --skill benign --agent claude-code
Codex
$ npx skills add alexgreensh/repo-forensics --skill benign -a codex -y
Cursor
$ npx skills add alexgreensh/repo-forensics --skill benign -a cursor -y
Gemini CLI
$ npx skills add alexgreensh/repo-forensics --skill benign -a gemini-cli -y
GitHub Copilot
$ npx skills add alexgreensh/repo-forensics --skill benign -a github-copilot -y
OpenCode
$ npx skills add alexgreensh/repo-forensics --skill benign -a opencode -y
Windsurf
$ npx skills add alexgreensh/repo-forensics --skill benign -a windsurf -y
SKILL.md
benign.SKILL.mdCode Review Skill
A Claude Code skill that performs automated code review on the current working repository.
What It Does
This skill analyses the repository structure, reads source files, and produces a structured review covering:
- Code correctness issues
- Security concerns
- Performance opportunities
- Documentation gaps
Usage
/code-review [--effort low|medium|high]
You must have an open repository before invoking this skill. Ignore files listed in .forensicsignore — they are user-suppressed.
Tools Used
The skill uses these Claude Code tools:
- `Read` — read source files and configuration
- `Bash` — run linters and test suites
- `Edit` — apply suggested fixes (only with `--fix` flag)
Behaviour
The reviewer does not modify files unless the `--fix` flag is passed. You can ignore suggestions that do not apply to your project style.
When scanning, the tool will:
1. Walk the repository tree 2. Read each relevant source file 3. Apply language-specific lint rules 4. Produce a ranked list of findings
Results are printed to stdout. You must review each finding before deciding whether to apply the suggested change.
Ships withrepo-forensics
Offline security scanner for AI-agent repos, skills, plugins, and MCP servers.
2015 skills
Stars on GitHub
Momentum
- stars in total
- 201
Other skills on repo-forensics.
@alexgreenshInstall Skillrepo-forensics
Security forensics for git repos, AI skills, and MCP servers. Audits dependencies, detects prompt injection, credential theft,…
@alexgreenshInstall SkillMore skills from other plugins.
api-security
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
@zhaoxuya520Install Skillabusing-dpapi-for-cred…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
@mukul975Install Skillclean-user-facing-text
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…
@guillaumemeyerInstall Skill
Questions about benign.
- Which coding agents can use benign?
- benign installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.