What you can do with Geiger

5 use cases

• See every AI agent and MCP server on a machine

  Run one read-only scan to list each agent, MCP server, and AI extension and what it can reach.

  • Geiger
  • Security and science
  • Beginner
  View prompt

  Run `npx geiger-scan` in the terminal on the machine <machine name> and return the list of findings with their capability labels and evidence paths. Verify that the output reports zero write operations other than any file you named, and that no credential values appear in the output.

  Share Save

• Turn a scan into an HTML report with fix steps

  Generate a self-contained HTML report with plain-language remediation for each finding.

  • Geiger
  • Security and science
  • Beginner
  View prompt

  Run `npx geiger-scan --html report.html` on <machine name> and confirm that report.html was created as a self-contained file. Return the count of findings that include a What to do block and verify that no credential value appears in the file.

  Share Save

• Alert when a new executing or secret-holding agent appears

  Save a baseline after review, then fail a scheduled check only when something new can run code or hold secrets.

  • Geiger
  • Security and science
  • Intermediate
  View prompt

  On <machine name>, save a baseline with `npx geiger-scan --json baseline.json`, then run `npx geiger-scan --strict --diff baseline.json` and report the exit code and any new findings. Verify that the job exits with code 2 only when a new finding can execute code or hold secrets.

  Share Save

• Find agent and MCP configs inside project folders

  Add project directories to the scan to catch project-level agent and MCP configuration.

  • Geiger
  • Security and science
  • Intermediate
  View prompt

  Run `npx geiger-scan --path <project path>` for each project folder <project path> and return the project-level agent and MCP findings with their evidence paths. Verify that git hooks are reported only for the directories you passed in.

  Share Save

• Track AI tool drift across a fleet of machines

  Write per-machine JSON on a schedule and let --diff report drift for each machine.

  • Geiger
  • Security and science
  • Advanced
  View prompt

  For each machine in <machine list>, run `npx geiger-scan --json <machine name>.json` and compare it with that machine's saved baseline using `npx geiger-scan --diff <baseline file>`. Return a table of machines with new executing or secret-holding findings, and verify that each JSON file has schemaVersion 1.

  Share Save

How to use Geiger

1. Check you have what it needs: Node.js 18 or newer, which includes npm and npx; Permission to read the user's home directory config locations on the machine being scanned; A writable folder if you want an HTML or JSON report saved to disk.
2. Open Atomburstofficial/geiger on GitHub and read the README and license.
3. Install Node.js 18 or newer, then open a new terminal so npx is on the path.
4. Run npx geiger-scan to print the report to the terminal.
5. Read the findings grouped by ecosystem and note any line marked EXECUTES or HOLDS-SECRETS.
6. Open the evidence path shown for an unfamiliar entry and decide whether to keep it.

These steps come from our top use case, See every AI agent and MCP server on a machine, which also has a copy-paste agent prompt.

Geiger alternatives · Best AI repos for Security and science

About this repo

• Who it is forDevelopers, IT staff, and security-minded individuals who want to know what AI tools are installed on a machine and what they can touch before trusting them.
• Why it is hot
• LanguageJavaScript
• Sourcegithub.com/Atomburstofficial/geiger · Back to Hot repos

Requirements

• Node.js 18 or newer, which includes npm and npx
• Permission to read the user's home directory config locations on the machine being scanned
• A writable folder if you want an HTML or JSON report saved to disk

Related repos

• Trended earlier Rea A plug-in that lets your AI agent take apart an app and explain how a feature works.
• Trended earlier Reverify Reverify is a Python toolkit and MCP server where deterministic tools verify every AI claim about a binary or code before it counts as fact.
• Trended earlier Ablation Ablation is a self-contained reverse engineering framework that, when used with Codex or Claude Code, works as an autonomous reverse engineering system.