Automated agents now submit issues, open pull requests, and post comments at scale across GitHub. Assay detects them before they waste your maintainers' time — no configuration, no code changes.
One click. No account required. Works on any public repository.
When a new issue, PR, or comment arrives, Assay runs it through 13 behavioral signals — linguistic patterns, temporal cadence, identity fingerprinting.
Real contributors pass silently. Agents get flagged, labeled, and documented with a full signal breakdown so you can make the call.
Clean submissions are never touched. Assay only speaks when it has something to say.
Signals detected
Assay posts this comment automatically. Your team decides what to do next.
One click. Select which repositories to protect. No code changes, no YAML, no secrets to manage.
New issues, PRs, and comments are scored against 13 signals — linguistic patterns, temporal cadence, identity analysis. Results in under a second.
Suspicious submissions get a comment with the full signal breakdown and an ai-generated label. Clean submissions pass silently.
Signals are organized by false-positive risk. High-confidence signals flag immediately. Lower-confidence signals require corroboration before Assay speaks. The result: almost no noise, and clear signal when it matters.
{{first_name}}Tier 3 signals cannot flag a submission on their own. Perfect AI vocabulary and sentence uniformity without any behavioral signals will score in the 40–60 range — marked "uncertain," not "agent." A non-technical human contributor who writes carefully will pass silently. The tiered architecture makes false positives rare by design.
Install Assay on any public repository in one click. No account required, no configuration, no API keys, no YAML. Assay starts scoring every new submission immediately.