amberb617

Unpick — AI skill for Claude Code

AI community

Vet AI agent skills, MCP servers, plugins and rules files before you install them.

How to install Unpick

This entry records only its repository, not the path inside it, so there is no exact command to give. Open amberb617/unpick and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Unpick does

Vet AI agent skills, MCP servers, plugins and rules files before you install them. Catches hidden instructions, paste-to-terminal setup steps and secret grabs. Offline, with an install hook for Claude Code, Codex and Cursor.

Alternatives in AI

Hol Guard — Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, M 485 ★
SoloDawn — Catches and repairs AI hallucinations before delivery: three quality gates, 31 built-in rules, a self-healing 312 ★
Laravel Claude Code Setup — One-command setup for AI-powered Laravel development with Claude Code and MCP servers 279 ★

README

unpick

**Vet AI agent add-ons before you install them.** unpick reads skills, MCP servers, plugins, hooks and rules files the way your AI will read them, and flags what a preview hides: setup steps that ask you to paste a command, base64 one-liners piped into a shell, instructions spelled out in invisible characters, and settings that switch off your agent's approvals. It runs offline by default and is built for people with no security team, no budget and no vendor accounts.

![unpick scanning a sample skill with planted attacks: three high findings, a summary and next steps](docs/screenshots/cli/scan-sample-a.svg)

Try it in 30 seconds

uvx unpick demo                 # writes a sample skill with planted attacks, nothing runs
uvx unpick scan demo/sample-a

`uvx` runs unpick without installing it. Then point it at a skill or plugin you already use: `uvx unpick scan ~/.claude/skills/`.

Install

pipx install 'unpick[tui]'      # or: brew install amberb617/tap/unpick
unpick setup                    # protect Claude Code, Codex and Cursor; shows every change first
unpick                          # the home screen

Python 3.11 or later, on macOS, Linux or Windows 11 (PowerShell 7 or Windows PowerShell 5.1). Optional extras: `pipx install 'unpick[yara]'` for YARA-X, `'.[ui]'` for the local web UI (phase 2), `'.[watch]'` for the watcher (phase 3), `'.[tui]'` for the home screen, `'.[fallback]'` for the fallback judge runtime (see below).

Then run `unpick setup`. It finds Claude Code, Codex CLI and Cursor on this machine, asks which to protect, how strict to be and whether to run the watcher at login, then shows every file it will change before it changes anything. `--dry-run` stops after showing the changes; `unpick setup --undo` removes all of it.

`unpick` on its own opens a home screen in the terminal (with the `tui` extra): which agents are protected, every add-on on this machine grouped by its worst finding, and recent watcher alerts.