How atomburstofficial/geiger works
Geiger is a read-only Node.js inventory and exposure-reporting tool for AI agents, MCP servers, hooks, skills, and related extensions. The principal workflow is CLI invocation → detector dispatch → finding normalization and risk assessment → terminal and optional HTML/JSON output; optional baseline comparison adds drift reporting. The README documents broader ecosystem coverage than the sampled implementation excerpts, so detector branches are represented from the registry and README. Some internal detector-to-helper relationships are supported only by the SOURCE INDEX; unsampled behavior is not inferred.
Main entry points: index.js Detector registry · platform.js Platform paths · geiger.js Geiger CLI · claude-code.js Claude Code
Components 24
CLI and reports
- Geiger CLI
bin/geiger.js - Terminal report
src/report/terminal.js - HTML report
src/report/html.js
Ecosystem detection
- Detector registry
src/detectors/index.js - Claude Code
src/detectors/claude-code.js - MCP hosts
src/detectors/mcp-hosts.js - AI apps
src/detectors/ai-apps.js - Other agents
src/detectors/other-agents.js - Agent hooks
src/detectors/hooks.js - Git hooks
src/detectors/git-hooks.js - VS Code extensions
src/detectors/vscode-extensions.js - Global CLIs
src/detectors/npm-global.js - AI browsers
src/detectors/ai-browsers.js - Browser extensions
src/detectors/browser-extensions.js - JetBrains IDEs
src/detectors/jetbrains.js
Finding analysis
- Finding engine
src/engine.js - MCP config parsing
src/detectors/common.js - Skill inspection
src/skill-scan.js - Risk patterns
src/patterns.js - Secret detection
src/redact.js - Baseline diff
src/diff.js
Shared runtime
- Platform paths
src/platform.js - Filesystem reads
src/util/fsx.js
Other components
- Operator
Connections 44
- Operator → Geiger CLI: invokes
README.md - Geiger CLI → Detector registry: loads detectors
bin/geiger.js - Geiger CLI → Finding engine: runs scan
bin/geiger.js - Finding engine → Detector registry: dispatches
- Detector registry → Claude Code: registers
src/detectors/index.js - Detector registry → MCP hosts: registers
src/detectors/index.js - Detector registry → AI apps: registers
src/detectors/index.js - Detector registry → Other agents: registers
src/detectors/index.js - Detector registry → Agent hooks: registers
src/detectors/index.js - Detector registry → Git hooks: registers
src/detectors/index.js - Detector registry → VS Code extensions: registers
src/detectors/index.js - Detector registry → Global CLIs: registers
src/detectors/index.js - Detector registry → AI browsers: registers
src/detectors/index.js - Detector registry → Browser extensions: registers
src/detectors/index.js - Detector registry → JetBrains IDEs: registers
src/detectors/index.js - Claude Code → MCP config parsing: uses
src/detectors/claude-code.js - Claude Code → Finding engine: assesses servers
src/detectors/claude-code.js - Claude Code → Skill inspection: inspects skills
src/detectors/claude-code.js - MCP hosts → MCP config parsing: uses
src/detectors/mcp-hosts.js - MCP config parsing → Finding engine: assesses servers
src/detectors/common.js - Git hooks → Risk patterns: checks commands
src/detectors/git-hooks.js - Git hooks → Secret detection: scans secrets
src/detectors/git-hooks.js - Skill inspection → Risk patterns: checks text
src/skill-scan.js - Skill inspection → Secret detection: scans secrets
src/skill-scan.js - Geiger CLI → Terminal report: renders
bin/geiger.js - Geiger CLI → HTML report: renders
bin/geiger.js - Geiger CLI → Secret detection: redacts output
bin/geiger.js - HTML report → Finding engine: uses actions
src/report/html.js - HTML report → Secret detection: redacts fields
src/report/html.js - Terminal report → Secret detection: redacts output
src/report/terminal.js - Geiger CLI → Baseline diff: compares baseline
bin/geiger.js - Claude Code → Platform paths: resolves paths
src/detectors/claude-code.js - Claude Code → Filesystem reads: reads configs
src/detectors/claude-code.js - Git hooks → Filesystem reads: reads hooks
src/detectors/git-hooks.js - Platform paths → Filesystem reads: joins paths
src/platform.js - AI apps → Platform paths: resolves paths
src/detectors/ai-apps.js - Browser extensions → Platform paths: resolves paths
src/detectors/browser-extensions.js - MCP hosts → Platform paths: resolves paths
src/detectors/mcp-hosts.js - Agent hooks → Platform paths: resolves paths
src/detectors/hooks.js - Other agents → Platform paths: resolves paths
src/detectors/other-agents.js - VS Code extensions → Platform paths: resolves paths
src/detectors/vscode-extensions.js - Global CLIs → Platform paths: resolves paths
src/detectors/npm-global.js - AI browsers → Platform paths: resolves paths
src/detectors/ai-browsers.js - JetBrains IDEs → Platform paths: resolves paths
src/detectors/jetbrains.js