AgentAuditKit MCP Security Scan

Version updated for https://github.com/sattyamjjain/agent-audit-kit to version v0.3.7.

  • This action is used across all versions by ? repositories.

Action Type

This is a Docker action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

AgentAuditKit is a comprehensive security scanner for AI agent pipelines, designed to detect vulnerabilities such as misconfigurations, hardcoded secrets, tool poisoning, trust boundary violations, and tainted data flows across 13 agent platforms. It automates security analysis using 169 rules across 11 categories, provides compliance mapping for multiple frameworks, and supports offline operation with zero cloud dependencies. This action helps organizations safeguard their AI systems by identifying risks, generating detailed security reports, and ensuring robust compliance with industry standards and regulations.

What’s Changed

Installation

pip:

pip install agent-audit-kit==v0.3.7

Docker:

docker pull ghcr.io/sattyamjjain/agent-audit-kit:v0.3.7

GitHub Action:

- uses: sattyamjjain/agent-audit-kit@v0.3.7
  with:
    fail-on: high

Supply chain

  • rules.json — deterministic rule bundle
  • rules.json.sha256 — trusted digest
  • sbom.cdx.json / sbom.spdx.json — CycloneDX + SPDX SBOM
  • *.sigstore — Sigstore keyless signatures (verify with agent-audit-kit verify-bundle)

What’s Changed

Full Changelog: https://github.com/sattyamjjain/agent-audit-kit/compare/v0.3.6...v0.3.7