AgentAuditKit MCP Security Scan

Version updated for https://github.com/sattyamjjain/agent-audit-kit to version v0.3.4.

  • This action is used across all versions by ? repositories.

Action Type

This is a Docker action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

AgentAuditKit is a security scanner designed for AI agent pipelines that identifies vulnerabilities such as misconfigurations, hardcoded secrets, tool poisoning, and tainted data flows across 13 agent platforms. It automates compliance checks, taint analysis, and supply chain security, providing extensive rule-based scanning and OWASP-aligned coverage for proactive risk mitigation. The action enables offline use, generates detailed compliance reports, and ensures rapid updates for addressing newly disclosed CVEs.

What’s Changed

Installation

pip:

pip install agent-audit-kit==v0.3.4

Docker:

docker pull ghcr.io/sattyamjjain/agent-audit-kit:v0.3.4

GitHub Action:

- uses: sattyamjjain/agent-audit-kit@v0.3.4
  with:
    fail-on: high

Supply chain

  • rules.json — deterministic rule bundle
  • rules.json.sha256 — trusted digest
  • sbom.cdx.json / sbom.spdx.json — CycloneDX + SPDX SBOM
  • *.sigstore — Sigstore keyless signatures (verify with agent-audit-kit verify-bundle)

What’s Changed

New Contributors

Full Changelog: https://github.com/sattyamjjain/agent-audit-kit/compare/v0.3.3...v0.3.4