Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 49 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.
Stars
142
Forks
13
Watchers
142
Open Issues
1
Overall repository health assessment
No package.json found
This might not be a Node.js project
3
commits
3
commits
feat(rules): add AGENT-120 — AI tool config hooks poisoning (CVE-2025-59536)
27c8416View on GitHubdocs: add Claude Code leaked source security audit report
3e5ca6aView on GitHubfeat(rules): add AGENT-110 to AGENT-119 — agent architecture security rules
c3e6ce6View on GitHubtest: add 43 tests for DeFi profile module (AGENT-090..109)
233599fView on GitHubfeat: integrate DeFi agent security rules as --profile defi
5a63f1fView on GitHubfix: resolve mypy errors for FunctionCall/StringLiteral types
1dd968cView on GitHubfix: resolve ruff lint errors (F401 unused Tuple, E713 not-in)
705cf9aView on GitHubfeat: multi-language deep analysis — TypeScript, Solidity, Go scanners
9f0d543View on GitHubchore: exclude test fixtures from GitHub secret scanning
8ecf7ddView on GitHubfix: add skip-existing to PyPI publish to avoid duplicate upload errors
62af5acView on GitHubfix: resolve mypy type errors in skill scanner integration
75da472View on GitHub