** AI 代理的盖革计数器。**

一个只读命令，可以盘点所有AI代理、线束、MCP服务器， 插件和机器上的AI扩展——并用通俗易懂的语言告诉你， 每个人能触及什么。

没有安装。没有账户。没有遥测数据。读取配置和目录，写入 什么都没有（除非你要求--json yourfile.json。

为什么会有这样的存在

2026年8月，一款开源代理框架从零提升到200,000+ GitHub 三周后将亮相。其插件生态系统突破了 13,000 个仓库 在同一窗口中。一键桌面客户端当天就出现了 已上线。Instagram的轮播现在教办公室职员安装所有这些。

每一个安装程序都是可以执行命令、读取的程序 文件，持有凭证——配置在没人会多看的点文件里。 问问自己这个工具回答的问题：**实际上运行的是什么 这台机器，它能触及什么？**大多数人无法回答。现在 它是一个命令。

扫描是什么样子

真实机器的真实输出（数值已编辑——见下文）。

它检测到的东西

geiger

A Geiger counter for AI agents.

One read-only command that inventories every AI agent, harness, MCP server, plugin, and AI extension on a machine — and tells you, in plain language, what each one can touch.

npx geiger-scan

No install. No account. No telemetry. Reads configs and directories, writes nothing (unless you ask for --json yourfile.json).

Why this exists

In August 2026, an open-source agent harness went from zero to 200,000+ GitHub stars in three weeks. Its plugin ecosystem passed 13,000 repositories in the same window. One-click desktop clients appeared the same day it launched. Instagram carousels now teach office workers to install all of it.

Every one of those installs is a program that can execute commands, read files, and hold credentials — configured in dotfiles nobody looks at twice. Ask yourself the question this tool answers: what is actually running on this machine, and what can it reach? Most people cannot answer it. Now it’s one command.

What a scan looks like

  GEIGER  ·  a Geiger counter for AI agents
  machine dev-laptop  ·  2026-09-06 12:24 UTC  ·  read-only · no telemetry
  ──────────────────────────────────────────────────────────────

  9 findings across 3 ecosystems  ·  7 can execute code  ·  1 credential in config files

  claude-code  (6)
    Claude Code  agent
      [EXECUTES] [BROAD-FILESYSTEM] [NETWORK]
      origin: registry · @anthropic-ai/claude-code
    magic (Claude Code · global)  MCP server
      [EXECUTES] [HOLDS-SECRETS] [BROAD-FILESYSTEM]
      origin: registry · @21st-dev/magic@latest
      credential: "API_KEY" — opaque value under a credential-named key · ~/.claude.json
      note: wrapped by a policy agent (domainguard-agent.exe) — enforcement layer in front of the server
    hooks: UserPromptSubmit, PreToolUse  hook
      [EXECUTES]
      note: hooks execute without a prompt each time their event fires
  ...

Real output from a real machine (values redacted — see below).

What it detects