{"name":"io.github.flagrix-io/flagrix","slug":"flagrix-io-flagrix","title":null,"description":"Scan GitHub repos and profiles for malware before cloning — commit-pinned risk verdicts for agents","url":"https://mcp.market/server/flagrix-io-flagrix","rating":null,"grade":"C","score":69,"certified":false,"status":"active","category":"devtools","tags":["devtools","security"],"presence":{"score":23,"stars":2,"forks":0,"downloads_week":46,"last_push_at":"2026-07-13T20:44:59.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/flagrix-io/flagrix-cli","website":null,"version":"0.1.0","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"flagrix","version":"0.1.0","runtimeHint":"npx","transport":{"type":"stdio"},"packageArguments":[{"value":"mcp","type":"positional"}],"environmentVariables":[{"description":"Optional GitHub token — raises API rate limits and enables private-repo scans","isSecret":true,"name":"GITHUB_TOKEN"}]}],"tools":[{"name":"scan_github_repo","description":"Scans a GitHub repository for malicious patterns (backdoors, data exfiltration, supply-chain attacks, known-bad packages) BEFORE cloning or installing it. The verdict is pinned to the repository's current commit SHA. Call this before cloning any untrusted repository.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_github_user","description":"Scores a GitHub user profile for throwaway-account and scam signals (account age, followers, activity, repository authenticity). Useful for vetting a 'recruiter' or 'client' before engaging with their repositories.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":69,"grade":"C","scanned_at":"2026-09-26T05:15:46.258Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-26T05:15:46.188Z","components":{"code":{"score":20,"max":25,"notes":["6 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":12,"max":15,"notes":["last push 74 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"assets/signatures-snapshot.json: …`]{0,200}[\\\"'`]\", \"description\": \"eval(), new Function(), or setTimeout/setInte…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"flagrix","version":"0.1.0","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":2,"publishedAt":"2026-07-08T14:37:11.278Z","repositoryUrl":"git+https://github.com/flagrix-io/flagrix-cli.git","weeklyDownloads":46}],"repo":{"found":true,"owner":"flagrix-io","repo":"flagrix-cli","archived":false,"pushedAt":"2026-07-13T20:44:59Z","stars":2,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/276391425?v=4","ownerCreatedAt":"2026-04-15T18:57:23Z","license":"MIT"},"icon":{"url":null,"source":"none"},"presence":{"stars":2,"forks":0,"downloadsWeek":46,"license":"MIT","lastPushAt":"2026-07-13T20:44:59.000Z","score":23}}}},"grade_history":[],"reviews":[]}