AgentIndex icon
AgentIndex
repo-forensics logo
repo-forensics
★ 194
vs
reticle logo
reticle
★ 1.3k

repo-forensics vs reticle

repo-forensics: Repo Forensics audits untrusted repositories, agent skills, plugins and MCP servers before they reach your agent, running 28 scanners and a correlation engine locally with zero dependencies and no telemetry. Installed as a plugin, it also watches installs and updates and blocks known-malicious packages.; reticle: Reticle puts a dev-only SDK inside your web or desktop app so a coding agent can look, act, observe and assert against the running app. Each check ends in a pass, fail or cannot-tell verdict with the network request, state change or console line that decided it and the source line to fix.

01

TL;DR

repo-forensics logo
repo-forensicsSecurity & Safety · ★ 194

Vet an MCP server or Claude Code skill before installing it

Read repo-forensics full review →
reticle logo
reticleDev Tooling · ★ 1.3k

Check that a coding agent's fix actually works in the running app

Read reticle full review →
02

Side-by-Side Comparison

Field
repo-forensics logorepo-forensics
reticle logoreticle
Category
Security & Safety
Dev Tooling
Stars
★ 194
★ 1.3k
License
NOASSERTION
NOASSERTION
Install Command
git clone https://github.com/alexgreensh/repo-forensics.git
npm install -g @reticlehq/server && claude mcp add reticle -s user -- npx @reticlehq/server mcp
Updated
5d ago
2d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
agent-security, agent-skill, agent-skills
agent-skill, agent-skills, agent-testing
03

Features

repo-forensics logorepo-forensics
0128 parallel scanners covering prompt injection, supply chain, credential theft and more
02Correlation engine with 41 rules to detect compound threats
03Fully local: no cloud API, no telemetry, zero dependencies
04Monitors git pull, npm/pnpm/uv updates and blocks known-malicious packages
05Exit codes for CI and SARIF 2.1.0 output for GitHub Security
reticle logoreticle
01Verdicts of yes, no or unknown with the evidence and file:line attached
02Reads network responses, store state (zustand, Redux, TanStack Query, Pinia) and console errors
03Saved flows that replay deterministically without an AI model
04CI gate that fails changes touching a saved flow without a new passing run
05SDK excluded from production builds; bridge listens only on 127.0.0.1
04

Use Cases

repo-forensics logorepo-forensics
↳Vet an MCP server or Claude Code skill before installing it
↳Check existing projects for traces of known supply chain attacks
↳Gate pull requests in CI on agent-ecosystem security findings
reticle logoreticle
↳Check that a coding agent's fix actually works in the running app
↳Catch silent failures such as a 500 response behind a success message
↳Guard key user journeys in CI with replayable flows
05

Best For

repo-forensics logorepo-forensics
—
reticle logoreticle
EssentialTrending
FAQ

FAQ

What is the difference between repo-forensics and reticle?
Both repo-forensics and reticle are in the Security & Safety category. repo-forensics has 194 stars, while reticle has 1.3k stars.
Which is better, repo-forensics or reticle?
The best choice depends on your use case. Choose repo-forensics if Vet an MCP server or Claude Code skill before installing it, and reticle if Check that a coding agent's fix actually works in the running app.
Is repo-forensics free or open source?
Yes, repo-forensics is open source on GitHub (NOASSERTION).
Is reticle free or open source?
Yes, reticle is open source on GitHub (NOASSERTION).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to repo-forensics →Alternatives to reticle →repo-forensics details →reticle details →