prompt-injection — Gesundheit von Open-Source-Software

npm · PyPI

94AußergewöhnlichGesundheitsindex

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

Python★ 17.8K19. Sept. 2026

Apache-2.019. Sept. 2026 · Metriken 2.10.0

PyPI · npm

94AußergewöhnlichGesundheitsindex

NuGuardAI/nuguard

AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessment, SBOM generation, and static analysis.

Python★ 44↓ 2.415/Monat10. Sept. 2026

Eigene Lizenz10. Sept. 2026 · Metriken 2.10.0

npm

94AußergewöhnlichGesundheitsindex

arcjet/arcjet-js

Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your JS/TS code.

TypeScript★ 682↓ 2.2M/Monat11. Sept. 2026

Apache-2.011. Sept. 2026 · Metriken 2.10.0

PyPI

94AußergewöhnlichGesundheitsindex

cisco-ai-defense/skill-scanner

Security Scanner for Agent Skills

Python★ 2.529↓ 340.6K/Monat17. Sept. 2026

Eigene Lizenz17. Sept. 2026 · Metriken 2.10.0

PyPI · crates.io

93AußergewöhnlichGesundheitsindex

duriantaco/skylos

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

Python★ 79615. Sept. 2026

Apache-2.015. Sept. 2026 · Metriken 2.10.0

PyPI · crates.io · npm

93AußergewöhnlichGesundheitsindex

hashgraph-online/hol-guard

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

Python · TypeScript★ 557↓ 95.5K/Monat5. Sept. 2026

Apache-2.05. Sept. 2026 · Metriken 2.10.0

PyPI · RubyGems

90ExzellentGesundheitsindex

OWASP/www-project-agent-memory-guard

OWASP Foundation web repository

Python★ 155↓ 2.902/Monat25. Aug. 2026

Apache-2.025. Aug. 2026 · Metriken 2.10.0

npm

89ExzellentGesundheitsindex

node9-ai/node9-proxy

The Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.

TypeScript★ 211↓ 7.422/Monat13. Sept. 2026

Apache-2.013. Sept. 2026 · Metriken 2.10.0

npm

88ExzellentGesundheitsindex

asamassekou10/ship-safe

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript★ 830↓ 5.893/Monat6. Sept. 2026

MIT6. Sept. 2026 · Metriken 2.10.0

npm · PyPI

87ExzellentGesundheitsindex

Agent-Threat-Rule/agent-threat-rules

Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable rules across 10 categories; merged into Microsoft AGT, Cisco AI Defense, MISP, OWASP, FINOS & SigmaHQ. MIT-licensed.

TypeScript★ 388↓ 72.8K/Monat9. Sept. 2026

MIT9. Sept. 2026 · Metriken 2.10.0

87ExzellentGesundheitsindex

cfgaudit/cfgaudit

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go★ 820. Okt. 2026

Apache-2.020. Okt. 2026 · Metriken 2.10.0

npm · PyPI

86ExzellentGesundheitsindex

issdandavis/SCBE-AETHERMOORE

Geometric AI governance and evaluation framework with a 14-layer security pipeline, semantic projection, and reproducible benchmark lanes.

Python · TypeScript★ 6↓ 4.607/Monat26. Aug. 2026

MIT26. Aug. 2026 · Metriken 2.10.0

PyPI · npm

83ExzellentGesundheitsindex

PrismorSec/prismor

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)

Python★ 343↓ 2.863/Monat11. Sept. 2026

Apache-2.011. Sept. 2026 · Metriken 2.10.0

83ExzellentGesundheitsindex

peg/rampart

Open-source firewall for AI agents. Policy engine that audits and controls what OpenClaw, Claude Code, Cursor, Codex, and any AI tool can do on your machine.

Go★ 836. Sept. 2026

Apache-2.06. Sept. 2026 · Metriken 2.10.0

npm

81ExzellentGesundheitsindex

lua-ai-global/governance

Zero-dependency TypeScript SDK for AI agent governance: policy enforcement, injection detection, tamper-evident audit, and standards mapping (EU AI Act, OWASP, NIST, ISO 42001)

TypeScript★ 26↓ 18.7K/Monat13. Sept. 2026

MIT13. Sept. 2026 · Metriken 2.10.0

80ExzellentGesundheitsindex

openclaw/clawscan

Composable security scanning harness for agent skills

Go · Python★ 1613. Sept. 2026

MIT13. Sept. 2026 · Metriken 2.10.0

PyPI

80ExzellentGesundheitsindex

pezhik/skilltotal

Scan AI components (MCP servers, agent skills, npm/PyPI packages) for malware & risky capabilities. Local, deterministic, evidence-anchored. Free & OSS.

Python★ 6↓ 2.906/Monat9. Okt. 2026

Apache-2.09. Okt. 2026 · Metriken 2.10.0

npm

78GutGesundheitsindex

getmcpm/cli

MCP security guard + package manager. Block prompt injection, tool poisoning and rug-pulls in Model Context Protocol servers at runtime; trust-scored installs with Sigstore provenance for Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and Gemini CLI. Local, deterministic, no LLM in the loop.

TypeScript★ 3↓ 2.345/Monat8. Sept. 2026

MIT8. Sept. 2026 · Metriken 2.10.0

npm · PyPI

78GutGesundheitsindex

sinewaveai/agent-security-scanner-mcp

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.

JavaScript · Python · TypeScript★ 122↓ 2.960/Monat9. Okt. 2026

MIT9. Okt. 2026 · Metriken 2.10.0

PyPI · npm

77GutGesundheitsindex

QWED-AI/qwed-open-responses

Verification guards for OpenAI Responses API - Verify AI agent outputs before execution

Python · TypeScript★ 1↓ 239/Monat18. Sept. 2026

Apache-2.018. Sept. 2026 · Metriken 2.10.0

Go · PyPI

77GutGesundheitsindex

luisgf/infrabroker

Infrastructure access broker for AI agents — SSH & Kubernetes. Per-operation ephemeral credentials minted by a separate signer; the model never touches one. MCP stdio / HTTP+OIDC.

Go★ 1019. Sept. 2026

GPL-3.019. Sept. 2026 · Metriken 2.10.0

Packagist

77GutGesundheitsindex

promptphp/intercept

A modular, drop-in middleware collection for Laravel AI SDK agents. Offers middleware across security, observability, performance and guidance.

PHP★ 63↓ 4.857/Monat26. Sept. 2026

MIT26. Sept. 2026 · Metriken 2.10.0

npm

75GutGesundheitsindex

Drakon-Systems-Ltd/ShieldCortex

Memory security for AI agents. Scan native memory writes, gate tools on bound hosts, inspect what was stored. Not a second brain.

TypeScript★ 25↓ 8.879/Monat20. Okt. 2026

MIT20. Okt. 2026 · Metriken 2.10.0

PyPI

75GutGesundheitsindex

crucible-security/crucible

pytest for AI agents - Autonomous red-teaming, behavioral monitoring & security testing for LLM agents

Python★ 48↓ 1.793/Monat10. Sept. 2026

Apache-2.010. Sept. 2026 · Metriken 2.10.0

PyPI · npm

75GutGesundheitsindex

gautamvarmadatla/mcpsafetywarden

MCP servers expose tools with no information about what they actually do at runtime. mcpsafetywarden sits between your agent and any MCP server, profiling tool behavior, blocking destructive calls, and running active security audits before you trust them in a workflow.

Python★ 8↓ 558/Monat15. Sept. 2026

Eigene Lizenz15. Sept. 2026 · Metriken 2.10.0

npm

75GutGesundheitsindex

panguard-ai/panguard-ai

Open-source security platform for AI agents -- audits skills before install, monitors 24/7, shares threat intelligence across all users. | AI Agent 開源安全平台 -- 安裝前審計 skill、24/7 即時監控、社群共享威脅情報。

TypeScript★ 63↓ 1.214/Monat5. Sept. 2026

MIT5. Sept. 2026 · Metriken 2.10.0

npm

75GutGesundheitsindex

superagent-ai/superagent

Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.

TypeScript · Python★ 6.751↓ 1.010/Monat20. Sept. 2026

MIT20. Sept. 2026 · Metriken 2.10.0

75GutGesundheitsindex

themayursinha/mcp-visor

Runtime policy enforcement and audit control plane for MCP tool execution. Deterministic, non-AI policy engine that intercepts MCP tools/call requests before execution.

Go★ 518. Okt. 2026

MIT18. Okt. 2026 · Metriken 2.10.0

npm · PyPI

73GutGesundheitsindex