Checks run on this computer and never run the add-on. Only a link is downloaded, from where it lives.
Offline AI add-on checker
Is this AI add-on safe to install?
Skills, rules files, MCP servers (small programs that give your AI extra tools) and plugins can carry instructions your AI follows but you never see. unpick reads them the way your AI does, and tells you whether to install.
Installed add-ons
Every skill, MCP server, rules file and plugin your AI agents load from this computer.
| Name | Type | Used by | Where | Changed | Action |
|---|
No AI add-ons found in the places agents keep them.
Nothing checked yet
Paste the path of a file or folder above and press Check, or try one of the samples.
Scanning the selected add-ons
Scan finished
What unpick found
Read it raw
Left: what a Markdown viewer shows you. Right: what the AI actually reads.
LineWhat you seeWhat the AI reads
Check an add-on from the web
unpick downloads it into quarantine (a locked folder your AI cannot load), looks up who made it, and checks it. Nothing is run or installed.
What the scan found
Test run in a sealed box
Optional, for when you want to see it in action. A throwaway AI uses the add-on inside a sealed box (a container with no network, no access to your files and only fake secrets), and you see what it tried to do.
What the test agent did
Result
A clean test run does not prove it is safe: it only shows what this task triggered.
Changes since your saved copy
Compares every add-on with the copy you last saved, so a quiet update cannot slip in.
Not checked yet
"Check for changes" lists every add-on that is new, changed or gone since you last saved a copy. The first time there is nothing to compare with, and this check does not look for warnings. Review them under Installed, then save a copy to compare later.
Something got in
For when an add-on you already installed turns out to be bad: switch it off, see which keys it could have read, and report it.
In quarantine now
1. Contain it
2. Keys an agent on this computer could read
unpick did not see this add-on use them. Change the ones you care about yourself: unpick cannot change them.
3. What the agents did
4. What changed on disk
5. Watch outgoing connections from now on
6. Report it
Settings
Optional extra scanners and AI reviewers. You do not need any of them: the built-in checks always run.
Other scanners (also called backends: separate tools unpick can run next to its own checks; all optional)
| Name | Installed | Version | Tested | Maintainer | Licence | Sends anything? |
|---|
AI reviewers (also called judges: another AI reads the add-on and gives a second opinion, never the verdict)
| Id | Where it runs | Found at | Permission | Usable | Trick test (files built to fool an AI reviewer) |
|---|
Agreement in the last scan
Run a scan with more than one checker to see where they agree.