Search Results for "security scanner"

The open-source Agentic LLM Vulnerability Scanner.

This repository is a public security-focused scanning tool intended to analyze and assess AI agent skills for potential issues, quality concerns, and vulnerabilities. It acts as a scanner that inspects Agent Skills packages to flag structural problems, inconsistencies, or security flaws before they are deployed or integrated into agent workflows. Because agent skills can contain executable instructions and logic, scanning them for risky patterns is essential to prevent inadvertent exploitation when used by intelligent systems. ...

promptmap is an automated security scanner for custom LLM applications that focuses on prompt injection and related attack classes. The project supports both white-box and black-box testing, which means it can either run tests directly against a known model and system prompt configuration or attack an external HTTP endpoint without internal access. Its scanning workflow uses a dual-LLM architecture in which one model acts as the target being tested and another acts as a controller that evaluates whether an attack succeeded. ...

Gitleaks is a fast, lightweight, portable, and open-source secret scanner for git repositories, files, and directories. With over 6.8 million docker downloads, 11.2k GitHub stars, 1.7 million GitHub Downloads, thousands of weekly clones, and over 400k homebrew installs, gitleaks is the most trusted secret scanner among security professionals, enterprises, and developers. Gitleaks-Action is our official GitHub Action.

AI-Infra-Guard is an open-source AI red teaming platform for evaluating security risks across modern AI ecosystems. It combines scanning for AI agents, agent skills, MCP servers, AI infrastructure, and OpenClaw deployments. Its infrastructure scanner fingerprints AI services and checks them against a large library of known vulnerabilities. Agent and skill analysis detects risks involving malicious instructions, unsafe code execution, privilege abuse, compromised tools, and insecure dependencies. ...

garak checks if an LLM can be made to fail in a way we don't want. garak probes for hallucination, data leakage, prompt injection, misinformation, toxicity generation, jailbreaks, and many other weaknesses. garak's a free tool, we love developing it and are always interested in adding functionality to support applications. garak is a command-line tool, it's developed in Linux and OSX. Just grab it from PyPI and you should be good to go. The standard pip version of garak is updated...

React Doctor is a developer tool that scans React codebases and identifies problems that commonly appear in AI-generated or poorly maintained frontend code. It gives projects a clear health score from 0 to 100, making technical issues easier to understand, prioritize, and communicate. The scanner checks areas such as state management, effects, performance, architecture, accessibility, security, and dead code. It works across popular React environments, including Next.js, Vite, and React Native. It can also be installed into coding agents so they learn better React practices before generating new code. For teams, it supports GitHub Actions workflows that can comment on pull requests and expose scores for automated quality gates.

HunterX AI-Assisted Offensive Security Engine Discover. Validate. Prove. Report. HunterX is not merely a vulnerability scanner. It is an open-source, AI-assisted offensive security engine for planning and running authorized security-assessment missions. It combines reconnaissance, security-tool orchestration, AI-assisted reasoning, hypothesis-driven investigation, vulnerability validation, evidence collection, proof / PoC engineering, replay / reproducibility, correlation, impact assessment and professional reporting into a single workflow. ...