npm · PyPI94Exceptionalhealth index
NVIDIA/SkillSpectorSecurity scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Python★ 17.8KSep 19, 2026
PyPI · npm94Exceptionalhealth index
NuGuardAI/nuguardAI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessment, SBOM generation, and static analysis.
Python★ 44↓ 2,415/moSep 10, 2026
npm94Exceptionalhealth index
arcjet/arcjet-jsRuntime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your JS/TS code.
TypeScript★ 682↓ 2.2M/moSep 11, 2026
PyPI94Exceptionalhealth index
Python★ 2,529↓ 340.6K/moSep 17, 2026
PyPI · crates.io93Exceptionalhealth index
duriantaco/skylosOpen source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/
Python★ 796Sep 15, 2026
PyPI · crates.io · npm93Exceptionalhealth index
hashgraph-online/hol-guardOpen-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
Python · TypeScript★ 557↓ 95.5K/moSep 5, 2026
PyPI · RubyGems90Excellenthealth index
Python★ 155↓ 2,902/moAug 25, 2026
npm89Excellenthealth index
node9-ai/node9-proxyThe Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.
TypeScript★ 211↓ 7,422/moSep 13, 2026
npm88Excellenthealth index
asamassekou10/ship-safeCLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
JavaScript★ 830↓ 5,893/moSep 6, 2026
npm · PyPI87Excellenthealth index
Agent-Threat-Rule/agent-threat-rulesOpen detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable rules across 10 categories; merged into Microsoft AGT, Cisco AI Defense, MISP, OWASP, FINOS & SigmaHQ. MIT-licensed.
TypeScript★ 388↓ 72.8K/moSep 9, 2026
Go87Excellenthealth index
cfgaudit/cfgauditStatic security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.
Go★ 8Oct 20, 2026
npm · PyPI86Excellenthealth index
issdandavis/SCBE-AETHERMOOREGeometric AI governance and evaluation framework with a 14-layer security pipeline, semantic projection, and reproducible benchmark lanes.
Python · TypeScript★ 6↓ 4,607/moAug 26, 2026
PyPI · npm83Excellenthealth index
PrismorSec/prismor Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)
Python★ 343↓ 2,863/moSep 11, 2026
Go83Excellenthealth index
peg/rampartOpen-source firewall for AI agents. Policy engine that audits and controls what OpenClaw, Claude Code, Cursor, Codex, and any AI tool can do on your machine.
Go★ 83Sep 6, 2026
npm81Excellenthealth index
lua-ai-global/governanceZero-dependency TypeScript SDK for AI agent governance: policy enforcement, injection detection, tamper-evident audit, and standards mapping (EU AI Act, OWASP, NIST, ISO 42001)
TypeScript★ 26↓ 18.7K/moSep 13, 2026
Go80Excellenthealth index
Go · Python★ 16Sep 13, 2026
PyPI80Excellenthealth index
pezhik/skilltotalScan AI components (MCP servers, agent skills, npm/PyPI packages) for malware & risky capabilities. Local, deterministic, evidence-anchored. Free & OSS.
Python★ 6↓ 2,906/moOct 9, 2026
getmcpm/cliMCP security guard + package manager. Block prompt injection, tool poisoning and rug-pulls in Model Context Protocol servers at runtime; trust-scored installs with Sigstore provenance for Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and Gemini CLI. Local, deterministic, no LLM in the loop.
TypeScript★ 3↓ 2,345/moSep 8, 2026
npm · PyPI78Goodhealth index
sinewaveai/agent-security-scanner-mcpSecurity scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
JavaScript · Python · TypeScript★ 122↓ 2,960/moOct 9, 2026
PyPI · npm77Goodhealth index
Python · TypeScript★ 1↓ 239/moSep 18, 2026
Go · PyPI77Goodhealth index
luisgf/infrabrokerInfrastructure access broker for AI agents — SSH & Kubernetes. Per-operation ephemeral credentials minted by a separate signer; the model never touches one. MCP stdio / HTTP+OIDC.
Go★ 10Sep 19, 2026
Packagist77Goodhealth index
promptphp/interceptA modular, drop-in middleware collection for Laravel AI SDK agents. Offers middleware across security, observability, performance and guidance.
PHP★ 63↓ 4,857/moSep 26, 2026
Drakon-Systems-Ltd/ShieldCortexMemory security for AI agents. Scan native memory writes, gate tools on bound hosts, inspect what was stored. Not a second brain.
TypeScript★ 25↓ 8,879/moOct 20, 2026
Python★ 48↓ 1,793/moSep 10, 2026
PyPI · npm75Goodhealth index
gautamvarmadatla/mcpsafetywardenMCP servers expose tools with no information about what they actually do at runtime. mcpsafetywarden sits between your agent and any MCP server, profiling tool behavior, blocking destructive calls, and running active security audits before you trust them in a workflow.
Python★ 8↓ 558/moSep 15, 2026
panguard-ai/panguard-aiOpen-source security platform for AI agents -- audits skills before install, monitors 24/7, shares threat intelligence across all users. | AI Agent 開源安全平台 -- 安裝前審計 skill、24/7 即時監控、社群共享威脅情報。
TypeScript★ 63↓ 1,214/moSep 5, 2026
superagent-ai/superagentSuperagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.
TypeScript · Python★ 6,751↓ 1,010/moSep 20, 2026
themayursinha/mcp-visorRuntime policy enforcement and audit control plane for MCP tool execution. Deterministic, non-AI policy engine that intercepts MCP tools/call requests before execution.
Go★ 5Oct 18, 2026
npm · PyPI73Goodhealth index
JavaScript · Python★ 10↓ 126.9K/moSep 5, 2026
TypeScript★ 5↓ 7,724/moSep 18, 2026