##GitHub Repositories

GitHub repositories assessed for config injection, compromised dependencies, and social manipulation.

##frequently asked questions

What is the brin registry?

The brin registry is a searchable database of security assessments for external context that AI agents and coding agents interact with — npm and PyPI packages, domains, web pages, GitHub repositories, MCP servers, agent skills, and commits. Every entity is scored 0–100 across identity, behavior, content, and graph dimensions.

What threats does brin detect?

brin detects prompt injection, credential harvesting, typosquatting, install-time attacks, documentation injection targeting AI agents and coding agents, type stub injection, tool shadowing in MCP servers, agent config manipulation, social engineering, obfuscated payloads, and supply chain attacks across all origin types.

Is the brin registry free?

Yes. The API requires no authentication and has no usage limits. Query any entity with a single GET request. The full dataset is also available as a JSONL data dump.

How fast are brin lookups?

Pre-scanned entities return in under 10 milliseconds — fast enough for agents and coding agents to query inline without slowing down. Unknown entities receive a preliminary score in under 5 seconds while a full scan runs in the background.