Scan agent repos for repo-poisoning, unsafe AI config files, and MCP attack surfaces with MEDUSA
Run a focused preflight scan over agent and MCP repositories to catch poisoned instruction files, dangerous configs, and AI-specific supply-chain risks before merge or deployment.
Prerequisites
Python 3 environment, pip, MEDUSA package, access to the local repo or target GitHub repository, and optional external linters for expanded coverage
Installation
Use the upstream install or setup path that matches your environment:
- pip install medusa-security
- git clone https://github.com/yourusername/medusa.git
- pip install -e ".[dev]"
Requirements and caveats from upstream:
Basic usage or getting-started notes:
🚀 Quick Start
bash
Run your first scan - that's it!
Extracted from upstream docs: https://raw.githubusercontent.com/Pantheon-Security/medusa/HEAD/README.md