Nullcore // Free Safety Tool
NullXray
A free safety and inspection tool for VRChat avatar packages.
Before you import an avatar or prefab someone sent you, drag the .unitypackage onto NullXray. In seconds you see whether it's hiding anything dangerous, plus a full breakdown of what's inside.
Free · no account
What it checks
- Safety — flags hidden scripts and DLLs, code that runs on import, and the real red flags (credential/token theft, shell launch, obfuscated loaders). Known tools like Poiyomi and VRCFury are recognized, so you don't get false alarms.
- Contents — every asset, with file types, sizes, and thumbnails.
- Performance — texture VRAM and material load, rated in VRChat terms.
- Broken-link and missing-script checks — know if it will import clean.
- Color and license — the avatar's palette, plus any readme or usage terms surfaced up front.
Fully static
NullXray reads the package. It never imports, compiles, or runs anything inside it. It's a heuristic scanner, not antivirus: it shows you the risk so you decide.
Comes with a small Unity plugin that adds a Nullcore menu to your project for cleaning missing scripts.
The installer is not code-signed, so Windows SmartScreen may warn on first download. Click More info, then Run anyway.
Made by Nullcore
If it helps you, check out NullFit, my tool that refits any outfit onto any 3D model automatically.
See NullFit Pro ›FAQ
What is NullXray?
Nullcore's first free tool suite for Unity and VRChat creators. It opens up a .unitypackage before you import it: eight tools in one window that scan for risky code, show you the full contents, check references and textures, rate performance, surface the license, and clean out missing scripts. So you import knowing exactly what you are getting.
Is it really free?
Yes. The whole suite is free, with no account needed. It runs on your machine and reads packages locally.
Is it out yet?
Yes. NullXray is out now, free for Windows. Grab it from the download button, then join the Discord for help and updates.
Does it replace antivirus?
No. It is a creator-focused safety net for Unity packages specifically, flagging risky scripts, hidden traps, and missing-script junk that general tools miss. Use it alongside your normal protection.
Is it open source?
No. NullXray is free to use, but it is closed source and licensed for personal use.