AgentAuditKit MCP Security Scan

Version updated for https://github.com/sattyamjjain/agent-audit-kit to version v0.3.68.

  • This action is used across all versions by ? repositories.

Action Type

This is a Docker action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

AgentAuditKit is a security scanner designed to audit AI agent pipelines for potential misconfigurations, hardcoded secrets, tool poisoning, and other vulnerabilities. It is the missing npm audit solution specifically tailored for AI agents, running offline and deterministically without relying on an LLM. The action produces auditor-ready compliance-evidence packs including SARIF reports and PDF evidence reports mapped to 12 security frameworks, ensuring precision and reliability in security audits.

What’s Changed

Installation

pip:

pip install agent-audit-kit==v0.3.68

Docker:

docker pull ghcr.io/sattyamjjain/agent-audit-kit:v0.3.68

GitHub Action:

- uses: sattyamjjain/agent-audit-kit@v0.3.68
  with:
    fail-on: high

Supply chain

  • rules.json — deterministic rule bundle
  • rules.json.sha256 — trusted digest
  • sbom.cdx.json / sbom.spdx.json — CycloneDX + SPDX SBOM
  • *.sigstore — Sigstore keyless signatures (verify with agent-audit-kit verify-bundle)

What’s Changed

Full Changelog: https://github.com/sattyamjjain/agent-audit-kit/compare/v0.3.67...v0.3.68