Skip to content

AgentShield

AgentShield scans AI agent configs for security vulnerabilities.

Code Video Cerebral Valley

Core trick

Runs static analysis and taint tracking from untrusted inputs to dangerous sinks, then executes configs in a sandbox with canary tokens to detect exfiltration.

Tags

securitydev tools

Description

AgentShield scans AI agent configs for security vulnerabilities. Built because the agent ecosystem has zero defense tooling. The threat is real. Claude Hub: 12% of its marketplace flagged malicious. Moltbook: leaked databases and API tokens exposing users' agents. BASI (51K members) shares jailbreak payloads openly. L1B3RT4S (17K stars) publishes prompt injection libraries. Shannon proves autonomous AI exploitation is production-ready. 120+ rules, 8 categories. --deep runs 5 layers: (1) Static analysis for secrets, permissions, injection vectors. (2) Taint tracking from untrusted inputs to dangerous sinks. (3) 65 prompt injection payloads across 12 categories from real BASI techniques. (4) Sandbox execution with canary tokens, network beacons, env probes. (5) 3-agent Opus 4.6 adversarial pipeline: Attacker chains multi-step exploits, Defender maps gaps, Auditor outputs prioritized actions. A-F grading, JSON/HTML output, auto-fix, CI exit codes. 1,280 tests. MIT licensed.
affaan-m/agentshield★ 1.3k293 forksTypeScriptMITCreated Feb 11, 2026 · last push Oct 18, 2026

README excerpt

<div align="center">

<img src="./assets/agentshield-logo.png" alt="AgentShield" width="180" />

# AgentShield

**Security auditor for AI agent configurations**

Scans Claude Code setups for hardcoded secrets, permission misconfigs,<br/>
hook injection, MCP server risks, and agent prompt injection vectors.<br/>
Available as CLI, GitHub Action, and [GitHub App](https://github.com/apps/ecc-tools) integration.

[![npm version](https://img.shields.io/npm/v/ecc-agentshield)](https://www.npmjs.com/package/ecc-agentshield)
[![npm downloads](https://img.shields.io/npm/dm/ecc-agentshield)](https://www.npmjs.com/package/ecc-agentshield)
[![tests](https://img.shields.io/badge/tests-passing-brightgreen)]()
[![coverage](https://img.shields.io/badge/coverage-v8-blue)]()
[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)

[Quick Start](#quick-start) · [What It Catches](#what-it-catches) · [API Reference](#api-reference) · [Opus Pipeline](#opus-46-deep-analysis---opus) · [GitHub Action](#github-action) · [Distribution](#distribution) · [MiniClaw](#miniclaw) · [Changelog](./CHANGELOG.md)

<a href="https://compute.itomarkets.com">
  <img src="./assets/ito.svg" alt="Itô Markets" width="180" />
</a>
<br />
<sub><strong>Preferred compute sponsor:</strong> Run or self-host any open-source model. Itô is ECC's suggested compute provider. Any GPU provider works. ECC only links to the Itô dashboard for sign-in and GPU rental or management; it does not create or manage rental

Team