Repotrap

Is this repo safe to open in your IDE / AI coding agent? One-shot pre-open trust check.

Defensive · passiveNothing is executed15 rulesShareable report

owner/name or github url ref (optional — branch, tag, sha)

We fetch the GitHub tarball read-only and scan it passively. GitHub archives exclude .git/, so .git/config poisoning shows as LATENT on repo scans — upload the archive to see the full chain.