START HERE
Check an AI add-on before you install it
Skills, rules files, MCP servers and plugins can carry instructions you never see. unpick reads them the way your AI does, on this computer, and sends nothing anywhere unless you ask.
- 1. Check the sourceWho made it, how old is it, does the name match the publisher?
- 2. Read it rawSee the hidden text a Markdown viewer leaves out.
- 3. Scan itBuilt-in checks, plus any scanners you have, all offline.
- 4. Test run in a boxLet a throwaway agent use it with fake secrets and no network.
- 5. Watch for changesSave what you approved and spot it when it changes.
INSTALLED
What AI add-ons are already on this computer
| Name | Type | Used by | Where | Changed | Action |
|---|
No AI add-ons found in the places agents keep them.
STEPS 2 AND 3
Read it raw, then scan it
Nothing scanned yet. Paste a path above, or try a sample:
Scanning the selected add-ons
What to do about it:
Next: test-run it
What a viewer shows vs what the AI reads
LineWhat you seeWhat the AI reads
STEP 1
Who made it? Check before you install
What the scan found
STEP 4
Test run in a sealed box
What the test agent did
Result
A clean test run does not prove it is safe: it only shows what this task triggered.
STEP 5
Has anything changed since you approved it?
Compares every add-on with what you last saved as approved. Changed text shows as a diff.
IF SOMETHING GOT IN
Contain it, change your keys, find out what happened
Secret values are never shown: names and places only. If a password stealer ran, changing those keys is not optional.
1. Contain it
In quarantine now
2. Change these keys and passwords
3. What the agents did
4. What changed on disk
5. Watch outgoing connections from now on
6. Report it
SETTINGS
Scanners and AI reviewers on this computer
Scanners (all optional; the built-in checks always run)
| Name | Installed | Version | Tested | Maintainer | Licence | Sends anything? |
|---|
AI reviewers (a second opinion, never the verdict)
| Id | Where it runs | Found at | Permission | Usable | Trick test |
|---|
Agreement in the last scan
Run a scan with more than one checker to see where they agree.