GitHub AI Code Inspector

Inspect GitHub repositories, pull requests, and files for security, quality, and AI-agent risks from the Chrome side panel.

Catalayer Code Inspector is a Chrome side-panel extension for reviewing GitHub repositories, pull requests, and files without leaving GitHub. It detects the GitHub context you are viewing and uses the Catalayer API to analyze repository structure, security signals, documentation quality, maintainability, package risks, workflow configuration, and AI-agent related risks. Key features: • Repository inspection Review public GitHub repositories and receive a trust score, category scores, findings, and an inspection report. • Pull request and file context Inspect supported pull requests and repository files directly from the Chrome side panel. • Security and quality signals Identify suspicious scripts, risky workflow patterns, exposed secrets indicators, dependency concerns, documentation gaps, Unicode anomalies, and maintainability issues. • AI-agent configuration checks Review MCP servers, agent configuration files, workflow instructions, and related repository signals. • Catalayer ID Sign in with your Catalayer ID to connect inspections with your account and synchronize supported history across devices. You can also use the extension without signing in. • GitHub access Public repositories work without a GitHub token. An optional GitHub Personal Access Token can be stored locally in Chrome to increase GitHub API rate limits. The token is used only for GitHub requests and is never sent to Catalayer. How it works: The extension detects the current supported GitHub repository, pull request, or file context. Relevant repository information is sent to the Catalayer API for analysis. Catalayer returns the inspection result to the extension for display in the side panel. Catalayer Code Inspector does not execute a separate local scoring engine or fallback scanner in the browser. Privacy: Catalayer processes only the information required to provide repository inspection, identity, synchronization, and related product functionality. GitHub Personal Access Tokens remain in Chrome local storage and are not transmitted to Catalayer. By Catalayer.