Pre-open repo agent-surface audit

By TextForAgents LLC. Before your agent opens a repository received as files (zip, shared drive, archive attached to a bug report), run this gate — before the agent's first git call. It never executes the tree.

It enumerates the complete agent-control surface on two separately graded surfaces:

• EXECUTION — git-config command sinks (core.fsmonitor, hooksPath, sshCommand, filter/diff drivers), hooks and every hooksPath target, .gitattributes drivers, .gitmodules ext:: URLs, MCP server commands, npm lifecycle scripts — at any depth and through symlinks.
• EXAMINATION — model pins against your pinned policy, review-scope exclusions (including implicit "only review X" omissions), do-not-reaudit clauses, permission widenings, unbounded agent-binding prose.

It issues a per-harness × per-version verdict — OPEN / OPEN-QUARANTINED / DO-NOT-OPEN — from a maintained patch-status matrix (matrix version 2026-10-28.1), and a receipt core whose tree hash binds file contents. The sanitise command emits a quarantined copy accepted only when it re-audits with zero high findings.

Stated plainly: a verdict grades the enumerated agent-control surface only — it is not a general malware, vulnerability, or safety determination about the tree's code. Enumeration is complete on the proven classes, but prose classification is pattern-based: a genuinely novel paraphrase can escape classification while never escaping enumeration. Verdicts are matrix-versioned. Willingness to pay is unmeasured.

Quickstart

pip install repo-agent-surface-pre-open-audit
cat > policy.json <<'EOF'
{"min_model_tier": 3, "forbidden_scope_exclusions": ["tests/", "tests", "test/"]}
EOF
preopen-audit audit /path/to/received-tree --harness claude-code --version 2.1.252 --policy policy.json
preopen-audit sanitise /path/to/received-tree /path/to/quarantined-copy

Python 3 standard library only. The local CLI processes trees on your own machine — no tree content leaves it. Hosted API/MCP form with signed receipts: https://textforagents.com/products/repo-agent-surface-pre-open-audit/ Support: support@textforagents.com