elliotllliu/agent-shield

**Give your AI a health check.**
One scan. Thirteen engines. One report.
中文文档
You found an MCP Server / Skill / Plugin online and want to install it. But you're wondering:
> Is this thing safe? Will it steal my API keys? Hijack my AI? Mine crypto?
**AgentShield answers that in seconds.** One command, 13 independent scanning engines, one clear report.
That's it. First run auto-installs all engines. After that, results come in seconds.
---
See It In Action
**One glance: 7 out of 7 external engines say it's clean. All major threats cleared. Safe to install.**
---
Why Trust It?
Because it's not one engine making the call. It's **13 independent scanning engines**, each a specialist in their own domain. We bring them together:
| Engine | What it's best at |
|--------|------------------|
| 📋 **AgentShield** *(reference)* | AI Agent basics — skill hijack, prompt injection, MCP runtime |
| 🔍 **Aguara** | General security — 177 rules, data exfil, taint tracking |
| 🔎 **Semgrep** | Code quality — 2000+ rules, injection, XSS, hardcoded secrets |
| 🧪 **Invariant** | MCP-specific — tool poisoning, cross-origin escalation, rug pull |
| 🔬 **Trivy** | Vulnerability scan + secret detection + SBOM |
| 🔑 **Gitleaks** | Secret and token leak detection |
| 🐍 **Bandit** | Python code security |
| 📡 **Bearer** | Data flow + privacy analysis |
| 🐕 **TruffleHog** | Secret detection + verification if active |
| 🌐 **OSV-Scanner** | Dependency vulnerabilities (Google OSV database) |
| 🦑 **Grype** | Dependency vulnerability scanning |
| 🟢 **njsscan** | Node.js / JavaScript security |
| 🔐 **detect-secrets** | Secret detection (Yelp) |
**Each engine has its own strengths. We combine all of them into one report.**
The built-in engine is reference-only — the overall conclusion is decided by the 7 external engines' consensus. The stronger they get, the stronger we get.
---
First Run
First time you run it, engines are auto-installed (to ~/.agentshield/, no sudo needed):
**One-time setup. After that, it's instant.**
---
What Can It Detect?
| Risk | What it means |
|------|--------------|
| 🔴 Skill Hijack | It's secretly modifying your AI's config |
| 🔴 Backdoor | It can silently execute arbitrary code |
| 🔴 Remote Control | It's connecting to external servers + opening a shell |
| ⚠️ Data Theft | It reads your keys/files and sends them out |
| ⚠️ Prompt Injection | It's secretly adding instructions to your AI |
| ⚠️ Tool Poisoning | Hidden malicious instructions in tool descriptions |