Writing "ask first" in CLAUDE.md isn't an approval check.

Paste your repo or config into our free checker. Find missing sub-agent approval checks, .env deny rules and suggested fixes you can copy. No install. Pasted text stays in your browser.

We read CLAUDE.md, AGENTS.md, .claude/settings.json, hooks, sub-agents, .mcp.json, Codex and Cursor config. Public repos only.

Example: the real checker on a sample repo

Fixed rules, ruleset harness-2026-10-03.1. The rule file is public: /lib/harness-check/rules.js. Nothing you paste leaves your browser; a GitHub URL is fetched by our server and not stored.

The rules have public tests: read them and run them yourself.

A score says which gates these rules found. It does not say a repo is safe. This check reads the configuration files a repo commits; it does not check that your host loaded them or that a hook ran, and it does not see or control what an agent does.