Statically scan agent repos for prompt injection and unsafe MCP configs with Agent Audit
Audit agent code, prompts, and MCP configuration for prompt-injection surfaces, taint issues, and unsafe tool exposure before shipping.
Prerequisites
agent-audit, local agent repository or config tree
Installation
Choose whichever fits your setup:
- Copy this skill folder into your local skills directory.
- Clone the repo and symlink or copy the skill into your agent workspace.
- Add the repo as a git submodule if you manage shared skills centrally.
- Install it through your internal provisioning or packaging workflow.
- Download the folder directly from GitHub and place it in your skills collection.
Install command or upstream instructions:
Install the agent-audit package from the upstream project, point it at an agent repository or config tree, and run the static scan before CI approval or release.