RedFlag: RedFlag uses AI to identify high-risk code changes

by Addepar · Agent Tool · ★ 163

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install RedFlag

pip install addepar-redflag

Taken from the project's README on GitHub. Check the security audit before running it.

Security audit verdict: SAFE · quality 74/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

aici-cdcode-reviewsecuritysecurity-auditsecurity-automationsecurity-tools

Quick Facts

Stars163
Forks11
LanguageJinja
CategoryAgent Tool
LicenseMIT
Quality Score74/100
Open Issues2
Last Updated2026-05-22
Created2024-06-06
Est. Tokens~20k

About RedFlag

[![Python][python-shield]][python-url] [![Contributors][contributors-shield]][contributors-url] [![MIT License][license-shield]][license-url] [![LinkedIn][linkedin-shield]][linkedin-url] [![Forks][forks-shield]][forks-url] [![Stargazers][stars-shield]][stars-url] [![Issues][issues-shield]][issues-url] RedFlag leverages AI to determine high-risk code changes.

RedFlag alternative? Top 6 similar tools

Looking for a RedFlag alternative? If you're comparing RedFlag with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • Awesome-AI-For-Security by AmanPriyanshu · ⭐ 149

    A curated list of tools, papers, and datasets for applying AI to cybersecurity tasks. This list primarily focu

  • mcp-zap-server by dtkmn · ⭐ 67

    Give AI agents a safe, self-hosted ZAP operator for guided web security scans, findings, reports, and producti

  • fuzzforge_ai by FuzzingLabs · ⭐ 769

    AI-powered workflow automation and AI Agents platform for AppSec, Fuzzing & Offensive Security. Automate vulne

  • Wazuh-MCP-Server by gensecaihq · ⭐ 246

    Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability

  • SecOpsAgentKit by AgentSecOps · ⭐ 215

    Security operations toolkit for AI coding agents. Give Claude Code 25+ skills to catch vulnerabilities, scan c

  • allama by digitranslab · ⭐ 197

    🔥🔥🔥 AI security automation platform. Build visual workflows, deploy autonomous agents, and automate threat

More Agent Tool Tools

Explore other popular agent tool tools:

View all Agent Tool tools →

Popular Jinja Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Agent Tool tools