RepoGates
A security assessment tool for AI agent installation workflows. Through multiple layers of mechanisms such as a browser extension, command hooks, and an MCP inspection service, it performs trust checks and interception at stages including repository cloning, package installation, and MCP server addition.
Timeline (last 90 days)
RepoGates offers browser extensions for Chrome and Edge that give a trust score from 0 to 100 on GitHub.com, GitLab.com and HuggingFace.co.
The RepoGates browser extension runs 22 checks on repositories and 18 checks on models.
The RepoGates browser extension can intercept and cancel a Download Zip operation for repositories that fail policy before the download reaches the Downloads folder.
RepoGates free edition allows 10 checks in the first 14 days, and known malware is still continuously blocked thereafter.
In Clawed Code, the RepoGates plugin mounts a hook on the bash tool, reads the exact line before the command runs, and refuses execution if the clone or install points to a blocked repository.
RepoGates' MCP server provides 12 tools that any MCP client can call before fetching content, compatible with Copilot, Cursor, Clawed.ai and Cowork.
RepoGates' MCP checks are advisory, and an agent that never calls them will not be blocked.
RepoGates' checkup feature is read-only, reading the plugins, skills, MCP servers, hooks and permission rules the agent already has, and never runs programs, modifies files or blocks any operation.
RepoGates' secret scanning is free and offline, finding API keys in folders, staged changes and git history, and never showing the full key.
RepoGates deep scan has OpenGrep, GitLeaks, Trivy and ClamAV read public repository files in an isolated sandbox, reading code but never running it.
3 more timeline events
All Facts (13)
RepoGates offers browser extensions for Chrome and Edge that give a trust score from 0 to 100 on GitHub.com, GitLab.com and HuggingFace.co.
50%UnverifiedThe RepoGates browser extension runs 22 checks on repositories and 18 checks on models.
50%UnverifiedThe RepoGates browser extension can intercept and cancel a Download Zip operation for repositories that fail policy before the download reaches the Downloads folder.
50%UnverifiedRepoGates free edition allows 10 checks in the first 14 days, and known malware is still continuously blocked thereafter.
50%UnverifiedIn Clawed Code, the RepoGates plugin mounts a hook on the bash tool, reads the exact line before the command runs, and refuses execution if the clone or install points to a blocked repository.
50%UnverifiedRepoGates' MCP server provides 12 tools that any MCP client can call before fetching content, compatible with Copilot, Cursor, Clawed.ai and Cowork.
50%UnverifiedRepoGates' MCP checks are advisory, and an agent that never calls them will not be blocked.
50%UnverifiedRepoGates' checkup feature is read-only, reading the plugins, skills, MCP servers, hooks and permission rules the agent already has, and never runs programs, modifies files or blocks any operation.
50%UnverifiedRepoGates' secret scanning is free and offline, finding API keys in folders, staged changes and git history, and never showing the full key.
50%UnverifiedRepoGates deep scan has OpenGrep, GitLeaks, Trivy and ClamAV read public repository files in an isolated sandbox, reading code but never running it.
50%UnverifiedRepoGates deep scan does not cover private repositories.
50%UnverifiedRepoGates' five gates (browser, Clawed Code, MCP, checkup, deep scan) share the same decision engine.
50%UnverifiedThe RepoGates browser gate starts free; the plugin, MCP server and checkup are part of paid plans starting at $69 per year; deep scan requires the advanced edition or scan packs.
50%