No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by ZacharyZcR · LLM Plugin · ★ 286
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is SecGPT safe to install? View the security audit →
SecGPT SecGPT is an open-source project inspired by AutoGPT, borrowing from its prompts and design patterns, but with significant code refactoring. As a solo developer project, we cannot guarantee the full quality of the code, but it has been extensively optimized and refactored in conjunction with GPT-4. We hope this will improve the overall code quality to some extent. Inheriting the philosophy of AutoGPT, the uniqueness of SecGPT lies in its more refined plugin functionality. SecGPT aims to make further contributions to network security by combining LLM, including penetration testing, red-blue confrontations, CTF competitions, and other aspects. How does SecGPT work? It aggregates existing plugin features and makes decisions through AI. Based on these decisions, it constructs basic behavior logic. Then, following this logic, it calls local plugin functions to attempt tasks such as website penetration, vulnerability scanning, code audit, and report writing. The update speed is slow, the author is reading and learning the source code of LangChain. The plugin is being written and tested, if you are interested, you can join our development.  is an open-source, cloud-native runtime for agentic AI. Secure, modular,
Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability
🔥🔥🔥 AI security automation platform. Build visual workflows, deploy autonomous agents, and automate threat
A curated list of tools, papers, and datasets for applying AI to cybersecurity tasks. This list primarily focu
Flock is a workflow-based low-code platform for rapidly building chatbots, RAG, and coordinating multi-agent t
A security scanner for your LLM agentic workflows
Explore other popular llm plugin tools:
SecGPT is A Test Project for a Network Security-oriented LLM Tool Emulating AutoGPT. It is categorized as a LLM Plugin with 286 GitHub stars.
SecGPT is primarily written in Python. It covers topics such as ai, autogpt, cybersecurity.
You can find installation instructions and usage details in the SecGPT GitHub repository at github.com/ZacharyZcR/SecGPT. The project has 286 stars and 75 forks, indicating an active community.
SecGPT is released under the Apache-2.0 license, making it free to use and modify according to the license terms.
The top alternatives to SecGPT on Agent Skills Hub include sre, Wazuh-MCP-Server, allama. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: