nspection inspects any GitHub repo across 6 security dimensions and hands you a shareable, deterministic report card. No signup. No black boxes.
Six dimensions covering the full attack surface of AI-era codebases. Same repo always gets the same grade.
Leaked keys, tokens, API secrets in source, configs, .env files, and git history.
deterministicPlaintext system prompts, eval(), remote instruction fetches, tool-call injection surfaces.
AI-specificAgent frameworks present + dangerous tool surfaces: exec, shell, SQL, file write, network.
AI-specificDependency CVEs, abandoned or typosquat packages, lockfile integrity, pinning hygiene.
deterministicCopyleft contamination risk, permissive vs restrictive licensing, unknown/missing license flags.
deterministicTest suites, CI pipelines, moderation/safety code, eval harnesses, and observability mechanisms.
deterministicEverything you need to inspect, grade, and share trust reports β all from one platform.
Point it at any public GitHub repo. We clone, scan, and grade it across 6 dimensions. Deterministic β same code always gets the same grade. No LLM required.
Try it now βEvery inspection generates a 1200Γ630 PNG card β optimized for OG/Twitter embeds. Post your grade anywhere; the card tells the whole story at a glance.
See example card βEvery inspected repo is ranked by overall trust score. The leaderboard updates live β compete for the top spot or find the safest repos to depend on.
View leaderboard βThe platform eats its own dogfood: input validation, target allowlists, malicious-pattern denylists, and per-IP rate limiting protect the public API.
Active on every requestFull programmatic access β inspect repos, fetch reports, pull leaderboard data, and serve OG cards. Build bots, CI gates, or dashboards on top.
View endpoints βInspect any local or GitHub repo from your terminal. Coming soon: npx nspection . β one command, one grade, zero friction.
Three steps from zero to a trust grade.
Paste a GitHub URL or owner/repo. No account needed.
We clone the repo and run deterministic analyzers across all 6 dimensions. No code leaves the platform.
Letter grade, numeric score, dimension breakdown, and a shareable PNG card β instantly.
langchain-ai/langchain, microsoft/autogen, or openai/openai-python. No signup, no upload.Full programmatic access. Inspect, fetch, and share β all via HTTP.
Inspect a GitHub repo or local path. Body: {"repo":"owner/name"}. Returns full report with grade, score, and dimensions.
Top inspected repos ranked by trust score. Query: ?limit=20. Returns id, repo, grade, score, color.
Shareable 1200Γ630 PNG report card for any inspection. Perfect for OG/Twitter embeds.
Full JSON report for a specific inspection by ID. All 6 dimension scores, metadata, and letter grade.
| # | Repository | Grade | Score |
|---|---|---|---|
| loading⦠| |||