security

Open-source security scanner for AI agents, MCP servers, and agent skills. It auto-discovers installed agent components and checks them for prompt injection, tool poisoning, secrets, malware payloads, and related risks.

Molt is an open protocol for letting an AI agent make bounded purchases through disposable, single-use payment credentials. The repo includes a clear quickstart, MCP integration, a threat model, and a working test-mode demo.

BoundaryBench is an open-source benchmark for coding agents running under hardened sandbox policies. It compares harnesses like Claude Code, Codex, Terminus 2, and Grok on Terminal-Bench tasks and includes quickstart, policy controls, and result export tools.

Open-source, local-first audit trail and detection layer for AI coding agents. It records tool calls from Cursor, Claude Code, Codex, and MCP servers, adds MITRE ATT&CK tags, correlates risky sequences, and can forward events to SIEM tools like Loki, Elastic, and Splunk.

Open-source sandboxing and secure file system for agent code execution, with built-in job queues, execution history, retries, Docker isolation, and optional gVisor hardening.

GitHub Marketplace app from NeuraLegion that scans apps and APIs for vulnerabilities, proposes fixes, and validates remediations inside GitHub workflows.

Browser extension that scans pastes for credentials and PII before they reach LLM chat sites, with local on-device inference and no network calls.

Open-source, self-hosted MCP knowledge server for AI agents that adds read-only access to company data, preserves business context, and can publish live dashboards as apps.

Disposable, network-restricted Linux VMs for AI coding agents. The project is built for letting coding agents install packages, run tests, use system tools, and work inside an isolated machine instead of the host laptop.

Local browser-control tool that lets coding agents drive a signed-in Chromium browser through a CLI, daemon, and extension.

Open-source platform for governing AI agents across clouds and stacks, with a control plane, sidecar-based data plane, policy enforcement, observability, and audit trails.

XSAF is a small, fetch-native TypeScript framework for building secure AI agents. The page shows its core API, agent lifecycle, tool pipeline, MCP support, session handling, and offline testing story.

Open-source credential gateway for AI agents that injects service credentials without exposing the real keys to the agent. Includes a vault, access tokens, host/path matching, and local quick-start instructions.

Cloak is a local secrets vault for AI agents that lets them use API keys without exposing the raw key to the model. The repo shows a CLI, local daemon, MCP server, policy controls, and quickstart commands for connecting with AI clients.

Open-source agentic mesh for governing AI agents across enterprise systems, with identity, policy enforcement, audit trails, observability, and Kubernetes-native deployment.

Grith is an OS-level security supervisor for AI coding agents on Linux. It intercepts syscalls, scores risky actions, pauses ambiguous ones for human review, and can deny dangerous calls before they run.

Open-source Go control-plane proxy for AI agents that enforces identity, policy, budgets, and audit for MCP and other upstreams, with anomaly detection that can auto-block compromised agents.

A local CLI for replaying what AI coding agents accessed on your machine, including file reads, secrets that entered context, and possible read-then-network-call exposure paths. It also scans exported ChatGPT, Claude, and Gemini histories for sensitive data.

Kernel-level read gate for AI coding agents that blocks protected file reads before bytes reach the agent, with Linux fanotify and macOS Endpoint Security support.

An AI API gateway/proxy in Go that sits between coding clients and upstream LLM providers, with request routing, secret redaction, context handling, MCP tool integration, and transparent SSE streaming.

A TypeScript static scanner that finds AI agent tool calls with no checks before they can trigger real-world side effects. It supports CLI scanning, JSON output, a generated tool-call registry, and CI/pre-commit enforcement.

Local guardrails for AI coding agents that intercept destructive actions before they execute, now extended to Git hooks for commit and push enforcement.

A zero-config CLI that scans repositories for AI-slop patterns like missing .env.example files, committed secrets, large files, duplicated code, TODO drift, and missing tests, then returns a Vibe Score from 0 to 100.

Beacon is an open-source endpoint telemetry layer for local AI agents. It captures supported activity from tools like Claude Code, Codex CLI, Gemini CLI, OpenCode, Factory Droid, Claude Cowork, and Cursor, then normalizes events for local inspection or forwarding to SIEM pipelines.