Version updated for https://github.com/sattyamjjain/agent-audit-kit to version v0.3.58. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary AgentAuditKit is a security scanner specifically designed to audit AI agent pipelines. It automates the detection of misconfigurations, hardcoded secrets, tool poisoning, rug pulls, trust boundary violations, and tainted data flows across various 13 agent platforms. Unlike hosted scanners that rely on LLMs for judgment, AgentAuditKit runs fully offline and deterministically, ensuring that findings are consistent across re-runs and audits. It also produces auditor-ready compliance-evidence packs in SARIF format along with PDF reports mapped to 13 security frameworks.

Version updated for https://github.com/sattyamjjain/agent-audit-kit to version v0.3.52. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary AgentAuditKit automates security scans for AI agent pipelines, providing offline determinism and auditor-ready compliance-evidence packs. It finds misconfigurations, hardcoded secrets, tool poisoning, rug pulls, trust boundary violations, and tainted data flows across 13 agent platforms. The action ensures consistent findings and produces comprehensive SARIF reports mapped to 13 security frameworks and compliance regimes.

Version updated for https://github.com/sattyamjjain/agent-audit-kit to version v0.3.50. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary AgentAuditKit automates security scans for AI agents, providing a fully offline and deterministic solution to identify misconfigurations, hardcoded secrets, tool poisoning, and other threats. It produces auditor-ready evidence packs in SARIF format and PDF reports mapped to 13 frameworks, ensuring compliance with EU AI Act, SOC 2, ISO standards, and regional regulations.

Version updated for https://github.com/sattyamjjain/agent-audit-kit to version v0.3.49. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary AgentAuditKit is a security scanner specifically designed to audit AI agent pipelines, automating the identification of potential misconfigurations, hardcoded secrets, and other security issues. It offers full offline determinism to ensure consistent findings across different runs, producing auditor-ready compliance-evidence packs including SARIF for GitHub Security tabs.

Version updated for https://github.com/sattyamjjain/agent-audit-kit to version v0.3.48. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Installation pip: pip install agent-audit-kit==v0.3.48 Docker: docker pull ghcr.io/sattyamjjain/agent-audit-kit:v0.3.48 GitHub Action: - uses: sattyamjjain/agent-audit-kit@v0.3.48 with: fail-on: high Supply chain rules.json — deterministic rule bundle rules.json.sha256 — trusted digest sbom.cdx.json / sbom.spdx.json — CycloneDX + SPDX SBOM *.sigstore — Sigstore keyless signatures (verify with agent-audit-kit verify-bundle) What’s Changed feat(rules): pin CVE-2026-14748 (MCP-server SSRF via tool-arg URL) as AAK-MCP-SSRF-001 by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/412 feat(rules): pin CVE-2026-49471 (Serena MCP unauthenticated-dashboard RCE) as AAK-MCP-SERENA-CVE-2026-49471-001 by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/413 Full Changelog: https://github.com/sattyamjjain/agent-audit-kit/compare/v0.3.47...v0.3.48

Version updated for https://github.com/sattyamjjain/agent-audit-kit to version v0.3.47. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Installation pip: pip install agent-audit-kit==v0.3.47 Docker: docker pull ghcr.io/sattyamjjain/agent-audit-kit:v0.3.47 GitHub Action: - uses: sattyamjjain/agent-audit-kit@v0.3.47 with: fail-on: high Supply chain rules.json — deterministic rule bundle rules.json.sha256 — trusted digest sbom.cdx.json / sbom.spdx.json — CycloneDX + SPDX SBOM *.sigstore — Sigstore keyless signatures (verify with agent-audit-kit verify-bundle) What’s Changed fix(rules): correct SEP citations on AAK-MCP-STATELESS-* pack (0.3.47) by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/409 feat(rules): pin CVE-2026-14471 (Amazon mcp-gateway-registry SQLi, closes #408) by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/410 Full Changelog: https://github.com/sattyamjjain/agent-audit-kit/compare/v0.3.46...v0.3.47

Version updated for https://github.com/sattyamjjain/agent-audit-kit to version v0.3.46. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Installation pip: pip install agent-audit-kit==v0.3.46 Docker: docker pull ghcr.io/sattyamjjain/agent-audit-kit:v0.3.46 GitHub Action: - uses: sattyamjjain/agent-audit-kit@v0.3.46 with: fail-on: high Supply chain rules.json — deterministic rule bundle rules.json.sha256 — trusted digest sbom.cdx.json / sbom.spdx.json — CycloneDX + SPDX SBOM *.sigstore — Sigstore keyless signatures (verify with agent-audit-kit verify-bundle) What’s Changed feat: State of MCP Security 2026 data-report harness by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/373 docs: kill public rule-count drift (221->225) + promote MCP-security data-report by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/382 chore(deps): Bump actions/setup-python from 6.2.0 to 6.3.0 by @dependabot[bot] in https://github.com/sattyamjjain/agent-audit-kit/pull/377 chore(deps): Bump click from 8.1.8 to 8.4.2 by @dependabot[bot] in https://github.com/sattyamjjain/agent-audit-kit/pull/376 chore(deps): bump github/codeql-action to v4.36.2 (all steps together) by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/383 docs: finish State of MCP Security 2026 report (launch-ready) + v0.3.42 by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/392 feat: MCP prevalence scan (664 configs) + score calibration (#23) by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/393 feat(rules): pin CVE-2026-52830 bearer-token path-traversal (AAK-MCP-AUTH-PATHTRAVERSAL-001, #394) by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/396 feat: MCP Server Card (SEP-1649) static scanner + prevalence crawler by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/397 feat: public OWASP coverage leaderboard (#67) + Kong Konnect MCP CVE-2026-13341 by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/405 feat(bench): reproducibility head-to-head — 20-run byte-identical finding set by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/406 fix(rules): AAK-FLOWISE-001 pin 3.1.2→3.1.3 for CVE-2026-58057 (closes #372) by @sattyamjjain in https://github.com/sattyamjjain/agent-audit-kit/pull/407 Full Changelog: https://github.com/sattyamjjain/agent-audit-kit/compare/v0.3.41...v0.3.46