by hugoii · Agent Tool · ★ 62
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 62 |
| Forks | 9 |
| Language | Python |
| Category | Agent Tool |
| License | MIT |
| Quality Score | 67/100 |
| Last Updated | 2026-07-10 |
| Created | 2026-06-04 |
| Platforms | python |
| Est. Tokens | ~15k |
Action-boundary audits for tool-using AI agents I test whether untrusted content, such as a user message, ticket, email, document, call transcript, or tool response, can push your tool-using AI agent into a high-impact action it should not take: issuing a refund, moving money, changing a vendor's bank account, deleting an account, granting access, disabling MFA, dispatching a job, or exporting...
Looking for a llm-agent-audit alternative? If you're comparing llm-agent-audit with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Task-scoped authorization for AI agents. Cryptographic warrants constrain tools and arguments, prevent privile
A secure local gateway for AI agents to reliably call approved enterprise APIs, tools, and services.
Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply cha
🛡️ A curated list of resources on agent skills security: attacks, defenses, frameworks, and benchmarks for se
Ask Codex, Gemini, Grok, and 400+ OpenRouter models (Qwen, Kimi, DeepSeek) for second opinions or arbiter-medi
Build Secure and Compliant AI agents and MCP Servers. YC W23
Explore other popular agent tool tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: