# Pre-open repo agent-surface audit — TextForAgents LLC
Before your agent opens that repo, know what in it will run — or reconfigure your agent. A repository received as files can execute code through .git/config sinks (core.fsmonitor, hooksPath, sshCommand, filter/diff drivers), hooks, and MCP/package hooks, and its own subagent definitions can downgrade the reviewing model, exclude the directory where the payload sits, and instruct the reviewer not to re-audit. This service is the pre-open gate: it never executes the tree, enumerates the complete agent-control surface on two separately graded surfaces (EXECUTION and EXAMINATION), issues a per-harness x per-version verdict — OPEN / OPEN-QUARANTINED / DO-NOT-OPEN — from a maintained patch-status matrix, signs a receipt whose tree hash binds file contents, and can emit a sanitised quarantined copy accepted only when it re-audits with zero high findings.
A verdict grades the enumerated agent-control surface of a received tree on two surfaces — EXECUTION and EXAMINATION — against the customer's pinned policy and the patch-status matrix for the named harness and version at audit time; it is not a general malware, vulnerability, or safety determination about the tree's code, and an OPEN verdict is not a representation that a tree is safe in any other respect. Enumeration is complete on the proven classes — every agent-binding file is listed in the signed receipt — but prose classification is pattern-based: a genuinely novel paraphrase can escape classification while never escaping enumeration. Verdicts are matrix-versioned: each verdict records the patch-matrix version it stands on. Willingness to pay is UNMEASURED.
Prices: Verdict lookup $0.01/query · Pre-open audit $0.99/tree · Audit + sanitised copy $1.99 · Operator plan $9.99/operator/mo (50 fresh audits included) · Fleet plan $19.99/operator/mo (200 fresh audits included). Plan inclusions are fresh audits only; sanitised copies meter at $1.99; lookups are free inside plans. One free pre-open audit per operator, ever (one-time trial). Support: support@textforagents.com
Product: https://textforagents.com/products/repo-agent-surface-pre-open-audit/
Docs: https://textforagents.com/products/repo-agent-surface-pre-open-audit/docs · OpenAPI: https://textforagents.com/products/repo-agent-surface-pre-open-audit/openapi.json · MCP: POST https://textforagents.com/products/repo-agent-surface-pre-open-audit/mcp · PyPI: repo-agent-surface-pre-open-audit
Patch matrix version: 2026-10-21.1 (verified 2026-10-21; weekly re-verification cadence)
Keep-clears (LEGAL-615): no commit-history line scoring; no secrets scanning; no cross-repository trust score; no publisher-authenticity or supply-chain provenance verification (receipt verification attests this service's own audit only); no deployed-agent monitoring.