HeadyZhang/agent-audit
Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 49 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.
Performs static taint analysis across tool boundaries to detect unsafe data flows into subprocess, eval, and SQL contexts, then correlates findings with framework-specific patterns (LangChain tool decorators, CrewAI agent definitions, AutoGen function signatures). Outputs results in SARIF, JSON, or baseline formats for CI integration, and includes a read-only MCP server inspector for auditing configuration and credential exposure without invoking tools.
104 stars. Available on PyPI.
Stars
104
Forks
11
Language
Python
License
MIT
Category
Last pushed
Mar 11, 2026
Commits (30d)
0
Dependencies
6
Get this data via API
curl "https://pt-edge.onrender.com/api/v1/quality/agents/HeadyZhang/agent-audit"
Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.
Related agents
AgentSeal/agentseal
Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor...
Nebulock-Inc/agentic-threat-hunting-framework
ATHF is a framework for agentic threat hunting - building systems that can remember, learn, and...
LucidAkshay/kavach
Tactical AI Workspace Monitor & EDR
affaan-m/agentshield
AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool...
cosai-oasis/secure-ai-tooling
The CoSAI Risk Map is a framework for identifying, analyzing, and mitigating security risks in...