hackmyagent: Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit

by opena2a-org · MCP Server · ★ 88

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install hackmyagent

npx hackmyagent secure
npx hackmyagent secure          # run without installing

Taken from the project's README on GitHub. Check the security audit before running it.

Security audit verdict: SAFE · quality 71/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

agent-securityai-agentsai-securityllm-securitymcpmcp-securitypenetration-testingprompt-injectionred-teamsecurity-scanner

Quick Facts

Stars88
Forks16
LanguageTypeScript
CategoryMCP Server
LicenseApache-2.0
Quality Score71/100
Open Issues214
Last Updated2026-10-23
Created2026-01-30
Platformsmcp, node
Est. Tokens~18k

About hackmyagent

HackMyAgent OpenA2A: CLI · HackMyAgent · Secretless · AIM · Browser Guard · DVAA Security scanner, red-team toolkit, and behavioural simulator for AI agents. Apache 2.0. Website · Demos · Discord Quick start my-project v1.0.0 · library · 47 files analyzed 3 critical issues found Security ━━━━━━━━━━━━━━━━━━━━ 42/100 ── Observations ──────────────────────────────────────────── Surfaces library · 47...

Compatible Skills

These tools work well together with hackmyagent for enhanced workflows:

  • ClawGuard — semantic(0.39)+complementary+same_lang+similar_pop+shared_platform (59%)

hackmyagent alternative? Top 6 similar tools

Looking for a hackmyagent alternative? If you're comparing hackmyagent with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • agentseal by AgentSeal · ⭐ 156

    Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply cha

  • shellward by jnMetaCode · ⭐ 139

    AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」(网安法·PIPL·等保2.0·数据出境·AI标识),并给出境内模型替代建议;可作运行时防护拦截注入与数据外泄 · 中文优先

  • agent-security-scanner-mcp by sinewaveai · ⭐ 121

    Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (

  • agent-threat-rules by Agent-Threat-Rule · ⭐ 422

    Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testab

  • compliant-llm by fiddlecube · ⭐ 162

    Build Secure and Compliant AI agents and MCP Servers. YC W23

  • rampart by peg · ⭐ 90

    Open-source firewall for AI agents. Policy engine that audits and controls what OpenClaw, Claude Code, Cursor,

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular TypeScript Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools