Laying out the streets…STEP 1 OF 3

ClonePeek · Office #46,563

Review hidden repo hooks before running unfamiliar code

In the Finding security holes in code neighborhood (Developer). In town since 20 Oct 2026.

Nobody has claimed this office yet. Tablif records every new product and gives it an office; when its owner claims it, the lights go on.

Is this yours? Claim it

What Tablif read on ClonePeek's site

ClonePeek describes itself as: “ClonePeek — Know what runs before you trust a repository”

What it is

Calls itself “CLI” and “scanner”.

  • Calls itself: CLI · scanner
“ClonePeek is a free, MIT-licensed, offline Python CLI and GitHub Action that inventories commands”
“Install the trusted scanner first.”

Where it puts itself

Rules out “package scripts, code hooks or MCP servers”.

  • Says it will not: package scripts, code hooks or MCP servers
“It does not run package scripts, code hooks or MCP servers.”

What it costs

A free tier, free forever.

  • Free plan: free forever
“ClonePeek is a free, MIT-licensed, offline Python CLI and GitHub Action”

Who it sells to

Sells to developers. Made for developers.

  • Sells to: developers
  • Made for: developers
“Built for skeptical developers.”

How it runs

A command-line tool for Linux, Windows and macOS. Runs locally and works offline. Distributed through the GitHub Marketplace. Open source. Built with GitHub Pages.

  • Kind: cli
  • Runs on: Linux · Windows · macOS
  • Runs where: on the device, offline
  • Distributed via: GitHub Marketplace
  • Open source: yes
  • Built with: GitHub Pages
“ClonePeek is a free, MIT-licensed, offline Python CLI and GitHub Action that inventories commands”
“Windows · Linux · macOS”

What it works with

Names Claude Code, Cursor and 5 more on its pages.

  • Names: Claude Code · Cursor · GitHub Action · +4
“ClonePeek is a free, MIT-licensed, offline Python CLI and GitHub Action that inventories commands configured to run through npm lifecycle scripts, VS Code folder-open tasks, devcontainers, Cursor and Claude Code hooks, and local MCP server launches.”
“Use ClonePeek as a composite action; report-only is the default.”

What it offers as proof

Live, no waitlist. Try it without signing up. Publishes docs.

  • Trial asks for: nothing
“Free action on GitHub Marketplace”
“Read the five-minute audit guide ↗ -> https://github.com/harshitethic/clonepeek/blob/main/docs/BEFORE-YOU-TRUST-A-REPO.md”

Sources

Tablif read these pages, last on 20 Oct 2026. Everything above is what the product says about itself; Tablif does not verify every claim.

Similar products in Tablif Town

Explore Tablif Town