Agent Exposure Audit · docfrawley bundle Audits AI and agent exposure across the local agent-harness environment and, where applicable, the codebase it works in. Inventories AI frameworks, agent runtimes, MCP servers, credentials, ambient identities, hooks, skills, and plugins; maps downstream reach; and identifies boundaries that are asserted but not enforced. Use for AI/agent security audits, MCP exposure, credential scoping, agent permissions, egress, blast radius, shadow AI infrastructure, prompt-injection reach, harness security, or questions about what an agent or framework can reach. Not a diff review.
