Airlock

Check a stranger's code before you run it, and the tools a site offers your AI agent. Verdicts are recorded on NEAR.

Someone sends you a take-home task. A free trading bot promises easy returns. A starter kit asks you to run npm install. Any of them can run code on your computer the moment you install or open it, and read your SSH keys, browser data or crypto wallets. Airlock checks the repository first, without it ever touching your computer. How it works: 1. On a GitHub repository or an npm package page, press "Check before you run". 2. Airlock fetches the repository on its own server and sends it, end-to-end encrypted, to an AI model running in a secure enclave (TEE) on NEAR AI Cloud. The enclave's attestation is checked before any code is sent, and every reply the model gives is signed. 3. You get a plain answer (Looks safe, Be careful, or Don't run it) with the reasons, the exact files and lines, and a report link you can share. 4. The verdict is recorded on NEAR. The registry contract stores it only after checking the model's signature, so anyone can verify it. If someone already checked a repository, Airlock shows that verdict from NEAR straight away. New: guard the AI agent in your browser Websites can now offer tools to the AI agent in your browser (WebMCP), such as "swap tokens" or "sign transaction". Turn on "Guard AI agents in the browser" in Settings, and Airlock checks every tool a page offers before the agent sees it: - A tool that asks for your seed phrase or private key is never offered to the agent. - A tool that slips hidden instructions to the agent is never offered. - A tool that moves money or signs a transaction waits for you: each time an agent calls it, you choose Allow or Block. The toolbar badge shows what each page offered and what Airlock held back. These checks run on your computer and send nothing. What Airlock looks for in a repository: - Scripts that run on install, or when you open the folder in your editor - Code that reads SSH keys, .env files, browser profiles or cloud credentials - Crypto wallet access and clipboard address swapping - Data sent to Telegram bots, Discord webhooks, paste sites or bare IP addresses - Packed or encoded code, and programs shipped inside the repository - Text planted to steer AI coding assistants Private by design: the extension sends only the address of a repository you choose to check. No account, no cookies, no tracking. Nothing is sent until you press the button. Turn on "Show earlier verdicts" in Settings to see a previous result as soon as you open a repository page. Free to use.