raqib.

رقيب

Your AI coding agent reads a file in this repository before every single response. Nobody reviews that file.

AGENTS.md, .github/copilot-instructions.md, CLAUDE.md and .cursorrules are loaded automatically and treated as orders from you. Fork a repository and you inherit its orders too. raqib reads them the way an attacker would: 40 rules for prompt injection, invisible Unicode, leaked credentials, dismantled guardrails, wasted context and contradictions. Everything runs in this tab, and nothing is uploaded.

Reads public repositories through the GitHub API from your browser, unauthenticated (60 requests per hour). Try ·

Run it in CI, where it actually matters

# one-off, no install
npx raqib .

# fail the build on anything high or worse
npx raqib . --fail-on high

# upload to the repository Security tab
npx raqib . --format sarif --out raqib.sarif

Or drop the GitHub Action into a workflow and every pull request that touches an instruction file gets annotated in the diff. Zero runtime dependencies, MIT.