Tools

AgentShield

AI agent security scanner that detects vulnerabilities in agent configurations, MCP servers, and tool permissions. Ships as a CLI, GitHub Action, and GitHub App.

https://github.com/affaan-m/agentshieldOpen Source2mo ago

Guardrail

Safety layer for AI-generated code. Scans and fixes security issues, performance problems, and AI-specific anti-patterns. 22 rules, AST auto-fix, zero config.

https://github.com/manavarya09/guardrailOpen Source2mo ago

SkillSpector

NVIDIA's security scanner for AI agent skills — detects vulnerabilities and malicious patterns.

github.com/nvidia/skillspector1mo ago

ClawdStrike

A security tool that checks ClawdBot builds for common security vulnerabilities. Created by Cantina as a public good tool to help developers identify and fix security issues in their AI applications.

www.clawdstrike.aiFree5mo ago

PentAGI

An advanced AI-powered penetration testing tool that operates as a fully autonomous agent. It automates complex security testing tasks to help identify vulnerabilities and security weaknesses in systems.

pentagi.comPaid5mo ago

Agentic Security

rUv's framework for AI agents focused on security — automated reconnaissance, vulnerability triage, and exploit explanation.

github.com/ruvnet/agentic-securityOpen Source2mo ago

RedAmon

An AI-powered autonomous red team framework that automates the complete offensive security pipeline from reconnaissance to exploitation to post-exploitation, then automatically triages findings, implements code fixes, and opens GitHub pull requests for remediation.

github.com/samugit83/redamonOpen Source5mo ago

Sirius Scan

An open-source comprehensive vulnerability scanner that leverages community-driven security intelligence and automated penetration testing capabilities. Features real-time health monitoring, centralized logging, and Docker-based deployment for enterprise-grade security scanning.

github.com/siriusscan/siriusOpen Source5mo ago

Codex Security

Codex Security is OpenAI's CLI and TypeScript SDK for scanning codebases to find, validate, and remediate security vulnerabilities using Codex models. It supports containerized bulk scans across pinned Git revisions, scan-to-scan comparison to track new or resolved findings, and flexible authentication via ChatGPT sign-in or API keys for CI use.

github.com/openai/codex-security2d ago

SecureClaw

End-to-end security platform for OpenClaw AI agents that provides audit checks, automated hardening, and runtime protection against prompt injection, credential theft, and privacy leaks. Features 56 audit checks, 15 behavioral rules, and comprehensive OWASP ASI framework coverage.

github.com/adversa-ai/secureclawOpen Source5mo ago

Claude Code Security Review

Anthropic's GitHub Action that uses Claude to analyze diffs for security vulnerabilities — flags issues with explanation and fix suggestions on every PR.

https://github.com/anthropics/claude-code-security-reviewOpen Source2mo ago

Shannon

An autonomous AI pentester that analyzes web application source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before production deployment. It performs white-box security testing with actual proof-of-concept attacks rather than just theoretical vulnerability scanning.

github.com/keygraphhq/shannonOpen Source3mo ago

Agent-Ready Site Scanner

A web scanner that analyzes websites for compatibility with AI agents by checking for emerging standards like MCP, agent skills, OAuth, and other agent-friendly protocols. Helps developers optimize their sites for the growing ecosystem of AI agents that browse and interact with web content.

isitagentready.comFree3mo ago

CodeCrucible

Go CLI tool that analyses Git repositories for security vulnerabilities using LLM-based analysis.

https://github.com/block/codecrucibleOpen Source2mo ago

Check-AI

Audit any repository for AI-readiness. CLI tool that scores how well a codebase is set up for AI agents to work in it.

https://github.com/f/check-aiOpen Source2mo ago

Agent Skills (Tech Leads Club)

A secure, validated skill registry for professional AI coding agents.

github.com/tech-leads-club/agent-skills1mo ago

OpenAI Security Bots

OpenAI's collection of security automation bots: triage, analysis, and response workflows powered by LLMs.

https://github.com/openai/openai-security-botsOpen Source2mo ago

Anthropic Cybersecurity Skills

An open-source library of 754 structured cybersecurity skills for AI agents, mapped to industry frameworks like MITRE ATT&CK, NIST CSF 2.0, and others. Enables AI agents to perform expert-level security analysis, threat hunting, and incident response by providing standardized workflows and decision-making processes.

github.com/mukul975/anthropic-cybersecurity-skillsOpen Source2mo ago

Awesome AI Security

A comprehensive curated list of AI security resources including frameworks, standards, offensive and defensive tools, learning materials, and open source security tools. Essential for security professionals working with AI systems and machine learning.

github.com/ottosulin/awesome-ai-securityOpen Source5mo ago

AI PR Review

Robust GitHub Actions workflow that provides AI-powered code reviews using Amp or Claude Code.

https://github.com/snarktank/ai-pr-reviewOpen Source2mo ago

Fowlcon

Agentic code review tool that gives PR reviewers conceptual clarity and competent backpressure against the AI-generated PR firehose.

https://github.com/block/fowlconOpen Source2mo ago

Is My Node Vulnerable

CLI that checks if your installed Node.js version has any known security vulnerabilities.

https://github.com/nodejs/is-my-node-vulnerableOpen Source2mo ago

ClawPatrol

Security firewall for AI agents — guardrails against prompt injection and dangerous tool calls. By Deno.

https://github.com/denoland/clawpatrolOpen Source2mo ago

Claudia

A mentor plugin for Claude Code that catches security bugs, teaches coding best practices, and coaches your prompts in real-time. It automatically scans code for vulnerabilities, provides contextual guidance, and helps improve AI coding workflows.

askclaudia.devOpen Source5mo ago