Check whether an agent skill, Claude Code plugin, MCP config or AI coding extension is safe before installing it — scans for remote code execution, obfuscated payloads, hidden Unicode instructions, credential or .env access, data-leak endpoints, prompt injection, permission bypass, hooks, MCP servers and install scripts.
Install
npx skills add usmanmanii/realitygate --skill scannpx skills add usmanmanii/realitygate --skill scan -a claude-code -gnpx skills add usmanmanii/realitygate --skill scan -a codex -ggemini skills install https://github.com/usmanmanii/realitygate.git --path skills/scangh skill install usmanmanii/realitygate scangit clone --depth 1 https://github.com/usmanmanii/realitygate /tmp/usmanmanii__realitygate
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/usmanmanii__realitygate/skills/scan ~/.claude/skills/scan # Claude Code
cp -R /tmp/usmanmanii__realitygate/skills/scan ~/.agents/skills/scan # Codex, Cursor, Gemini CLI, Copilot, OpenCode