{
  "generatedAt": "2026-10-12T13:37:29Z",
  "tools": [
    {
      "slug": "skillspector",
      "name": "SkillSpector",
      "repo": "NVIDIA/SkillSpector",
      "kind": "scanner",
      "description": "Security scanner for AI agent skills. Checks a skill for vulnerabilities, malicious patterns and security risks before it is installed, using static analysis and an optional LLM review.",
      "license": "Apache-2.0",
      "maintainer": "NVIDIA",
      "covers": [
        "Agent skills",
        "Claude Code",
        "Codex CLI",
        "Gemini CLI",
        "MCP servers"
      ],
      "homepage": "https://docs.nvidia.com/skills/scanning-agent-skills",
      "added": "2026-10-09",
      "checked": "2026-10-12"
    },
    {
      "slug": "tencent-ai-infra-guard",
      "name": "AI-Infra-Guard",
      "repo": "Tencent/AI-Infra-Guard",
      "kind": "scanner",
      "description": "Red teaming platform that fingerprints AI infrastructure components against known CVEs and scans MCP servers, agent skills and agent workflows for risks. Also runs LLM jailbreak evaluations.",
      "license": "Apache-2.0",
      "maintainer": "Tencent Zhuque Lab",
      "covers": [
        "AI infrastructure",
        "MCP servers",
        "Agent skills",
        "LLM jailbreaks"
      ],
      "homepage": "https://tencent.github.io/AI-Infra-Guard/",
      "added": "2026-10-09",
      "checked": "2026-10-12"
    },
    {
      "slug": "snyk-agent-scan",
      "name": "Snyk Agent Scan",
      "repo": "snyk/agent-scan",
      "kind": "scanner",
      "description": "Discovers agent components on a machine (agents, MCP servers, skills) and scans them for prompt injections and vulnerabilities. Formerly Invariant Labs' mcp-scan.",
      "license": "Apache-2.0",
      "maintainer": "Snyk",
      "covers": [
        "MCP servers",
        "Agent skills",
        "Coding agents"
      ],
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "cisco-mcp-scanner",
      "name": "MCP Scanner",
      "repo": "cisco-ai-defense/mcp-scanner",
      "kind": "scanner",
      "description": "Python tool that scans MCP servers and tools for security findings, combining YARA rules, LLM-based analysis and the Cisco AI Defense inspect API. Runs as a CLI or a REST API server.",
      "license": "Apache-2.0",
      "maintainer": "Cisco AI Defense",
      "covers": [
        "MCP servers"
      ],
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "splx-agentic-radar",
      "name": "Agentic Radar",
      "repo": "splx-ai/agentic-radar",
      "kind": "scanner",
      "description": "Security scanner for agentic workflows: analyzes agentic systems to show how they work and to find potential vulnerabilities. Can run in CI on every push.",
      "license": "Apache-2.0",
      "maintainer": "splx-ai",
      "covers": [
        "Agentic workflows"
      ],
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "numbat",
      "name": "numbat",
      "repo": "perplexityai/numbat",
      "kind": "scanner",
      "description": "Endpoint visibility for AI agent activity. Finds the agents on a machine and flags risky actions with CEL and YAML rules, such as a secret file read followed by egress. Shipped rules only monitor.",
      "license": "Apache-2.0",
      "maintainer": "Perplexity",
      "covers": [
        "Codex",
        "Claude Code",
        "OpenClaw"
      ],
      "added": "2026-10-11",
      "checked": "2026-10-12"
    },
    {
      "slug": "protectai-modelscan",
      "name": "ModelScan",
      "repo": "protectai/modelscan",
      "kind": "scanner",
      "description": "Open-source scanner from Protect AI that checks machine learning model files for unsafe code before they are loaded.",
      "license": "Apache-2.0",
      "maintainer": "Protect AI",
      "covers": [
        "Model files"
      ],
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "picklescan",
      "name": "picklescan",
      "repo": "mmaitre314/picklescan",
      "kind": "scanner",
      "description": "Security scanner that detects Python pickle files performing suspicious actions, including models hosted on Hugging Face.",
      "license": "MIT",
      "maintainer": "mmaitre314",
      "covers": [
        "Pickle files",
        "Hugging Face models"
      ],
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "fickling",
      "name": "Fickling",
      "repo": "trailofbits/fickling",
      "kind": "scanner",
      "description": "Decompiler, static analyzer and bytecode rewriter for Python pickle files. Detects and analyzes malicious pickle and pickle-based files, including PyTorch files.",
      "license": "LGPL-3.0",
      "maintainer": "Trail of Bits",
      "covers": [
        "Pickle files",
        "PyTorch models"
      ],
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "nemo-guardrails",
      "name": "NeMo Guardrails",
      "repo": "NVIDIA-NeMo/Guardrails",
      "kind": "guardrail",
      "description": "Open-source toolkit for adding programmable guardrails between application code and an LLM in LLM-based conversational applications.",
      "license": "Apache-2.0",
      "maintainer": "NVIDIA",
      "covers": [
        "LLM applications"
      ],
      "homepage": "https://docs.nvidia.com/nemo/guardrails",
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "guardrails-ai",
      "name": "Guardrails",
      "repo": "guardrails-ai/guardrails",
      "kind": "guardrail",
      "description": "Python framework that runs input and output guards in an AI application to detect, quantify and mitigate specific risks, with validators from Guardrails Hub.",
      "license": "Apache-2.0",
      "maintainer": "Guardrails AI",
      "covers": [
        "LLM applications"
      ],
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "purple-llama",
      "name": "Purple Llama",
      "repo": "meta-llama/PurpleLlama",
      "kind": "guardrail",
      "description": "Meta's umbrella project of open tools and evals for building with open generative AI models, including the Llama Guard safeguard models and the CyberSecEval benchmarks.",
      "license": "MIT (evals), Llama 3.2 Community License (models)",
      "maintainer": "Meta",
      "covers": [
        "LLM applications",
        "Open-weight models"
      ],
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "hol-guard",
      "name": "HOL Guard",
      "repo": "hashgraph-online/hol-guard",
      "kind": "guardrail",
      "description": "Local policy layer that reviews an agent action before it runs, including shell commands, file access, package installs and MCP tool calls, then allows it, blocks it or asks for approval.",
      "license": "Apache-2.0",
      "maintainer": "Hashgraph Online",
      "covers": [
        "Claude Code",
        "Codex",
        "Cursor",
        "GitHub Copilot CLI",
        "Gemini CLI",
        "MCP servers",
        "Agent skills"
      ],
      "added": "2026-10-12",
      "checked": "2026-10-12"
    },
    {
      "slug": "pipelock",
      "name": "Pipelock",
      "repo": "luckyPipewrench/pipelock",
      "kind": "guardrail",
      "description": "Agent firewall. Inspects the HTTP, WebSocket, MCP and A2A traffic it mediates for secret exfiltration, prompt injection, SSRF and tool poisoning, and signs a receipt for each action it passes.",
      "license": "Apache-2.0 (core), Elastic-2.0 (enterprise directory)",
      "maintainer": "Joshua Waldrep",
      "covers": [
        "MCP servers",
        "A2A",
        "Claude Code",
        "Codex",
        "Cursor",
        "LangGraph"
      ],
      "homepage": "https://pipelab.org/learn",
      "added": "2026-10-12",
      "checked": "2026-10-12"
    },
    {
      "slug": "praetorian-augustus",
      "name": "Augustus",
      "repo": "praetorian-inc/augustus",
      "kind": "red-team",
      "description": "Go command line scanner that tests an LLM or endpoint against 210+ adversarial probes for prompt injection, jailbreaks, encoding attacks and data extraction, then writes a findings report.",
      "license": "Apache-2.0",
      "maintainer": "Praetorian",
      "covers": [
        "LLMs",
        "OpenAI",
        "Anthropic",
        "AWS Bedrock",
        "Ollama",
        "LangChain",
        "REST API endpoints"
      ],
      "added": "2026-10-12",
      "checked": "2026-10-12"
    },
    {
      "slug": "garak",
      "name": "garak",
      "repo": "NVIDIA/garak",
      "kind": "red-team",
      "description": "Generative AI red-teaming and assessment kit. Probes an LLM or dialog system for prompt injection, jailbreaks, data leakage, hallucination and other weaknesses.",
      "license": "Apache-2.0",
      "maintainer": "NVIDIA",
      "covers": [
        "LLMs",
        "Chatbots"
      ],
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "pyrit",
      "name": "PyRIT",
      "repo": "microsoft/PyRIT",
      "kind": "red-team",
      "description": "The Python Risk Identification Tool for generative AI: an open framework that helps security professionals and engineers find risks in generative AI systems.",
      "license": "MIT",
      "maintainer": "Microsoft",
      "covers": [
        "Generative AI systems"
      ],
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "promptfoo",
      "name": "promptfoo",
      "repo": "promptfoo/promptfoo",
      "kind": "red-team",
      "description": "CLI and library for evaluating and red-teaming LLM-based apps and agents.",
      "license": "MIT",
      "maintainer": "Promptfoo",
      "covers": [
        "LLM applications",
        "Agents"
      ],
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "deepteam",
      "name": "DeepTeam",
      "repo": "confident-ai/deepteam",
      "kind": "red-team",
      "description": "Open-source red teaming framework for LLM systems that runs locally, built on the DeepEval evaluation framework.",
      "license": "Apache-2.0",
      "maintainer": "Confident AI",
      "covers": [
        "LLM systems"
      ],
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "anamorpher",
      "name": "Anamorpher",
      "repo": "trailofbits/anamorpher",
      "kind": "red-team",
      "description": "Crafts and previews image scaling attacks against multi-modal AI systems: images that reveal a prompt injection only once they are downscaled. Covers bicubic, bilinear and nearest-neighbor.",
      "license": "Apache-2.0",
      "maintainer": "Trail of Bits",
      "covers": [
        "Multi-modal LLMs",
        "OpenCV",
        "PyTorch",
        "TensorFlow",
        "Pillow"
      ],
      "added": "2026-10-09",
      "checked": "2026-10-12"
    },
    {
      "slug": "agentdojo",
      "name": "AgentDojo",
      "repo": "ethz-spylab/agentdojo",
      "kind": "eval",
      "description": "A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents, from ETH Zurich and Invariant Labs.",
      "license": "MIT",
      "maintainer": "ETH Zurich SPY Lab and Invariant Labs",
      "covers": [
        "LLM agents"
      ],
      "homepage": "https://agentdojo.spylab.ai/results/",
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "uber-adr",
      "name": "ADR (Agentic AI Detection and Response)",
      "repo": "uber/ADR",
      "kind": "eval",
      "description": "Uber's toolkit for agent security: inventories agents and MCP servers on endpoints, records agent traces, and ships ADR-Bench, a benchmark of 17 agent attack techniques, with two-tier detectors.",
      "license": "Apache-2.0",
      "maintainer": "Uber",
      "covers": [
        "Cursor",
        "Claude Code",
        "Codex",
        "GitHub Copilot CLI",
        "DeepSeek Harness",
        "MCP servers"
      ],
      "added": "2026-10-10",
      "checked": "2026-10-12"
    },
    {
      "slug": "giskard",
      "name": "Giskard",
      "repo": "Giskard-AI/giskard-oss",
      "kind": "eval",
      "description": "Python library for evals, red teaming and test generation on agentic systems. Its Scan mode probes an agent for prompt injection, jailbreaks, harmful content and other OWASP LLM Top 10 risks.",
      "license": "Apache-2.0",
      "maintainer": "Giskard",
      "covers": [
        "LLM agents",
        "Multi-step pipelines",
        "OpenAI",
        "Anthropic"
      ],
      "homepage": "https://docs.giskard.ai/oss",
      "added": "2026-10-11",
      "checked": "2026-10-12"
    },
    {
      "slug": "sandbox-runtime",
      "name": "Anthropic Sandbox Runtime (srt)",
      "repo": "anthropics/sandbox-runtime",
      "kind": "sandbox",
      "description": "Lightweight OS-level sandbox that enforces filesystem and network limits on any process without a container. Can sandbox agents, local MCP servers and bash commands. Beta research preview.",
      "license": "Apache-2.0",
      "maintainer": "Anthropic",
      "covers": [
        "Agents",
        "MCP servers",
        "Bash commands"
      ],
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "e2b",
      "name": "E2B",
      "repo": "e2b-dev/E2B",
      "kind": "sandbox",
      "description": "Open-source infrastructure for running AI-generated code in secure, isolated cloud sandboxes, controlled from JavaScript and Python SDKs.",
      "license": "Apache-2.0",
      "maintainer": "E2B",
      "covers": [
        "AI-generated code",
        "Agents"
      ],
      "added": "2026-10-08",
      "checked": "2026-10-12"
    },
    {
      "slug": "toolhive",
      "name": "ToolHive",
      "repo": "stacklok/toolhive",
      "kind": "sandbox",
      "description": "Runs each MCP server in an isolated container with a minimal permission file and no local credentials. Adds access policies, encrypted secrets and network isolation. CLI, desktop app or Kubernetes.",
      "license": "Apache-2.0",
      "maintainer": "Stacklok",
      "covers": [
        "MCP servers",
        "Claude Desktop",
        "Claude Code",
        "Cursor",
        "VS Code",
        "Kubernetes"
      ],
      "homepage": "https://docs.stacklok.com/toolhive/",
      "added": "2026-10-10",
      "checked": "2026-10-12"
    },
    {
      "slug": "agent-sandbox",
      "name": "Agent Sandbox",
      "repo": "kubernetes-sigs/agent-sandbox",
      "kind": "sandbox",
      "description": "Kubernetes controller and Sandbox resource for running isolated, stateful workloads such as agent runtimes. Isolation comes from the runtime, such as gVisor or Kata Containers. Go and Python SDKs.",
      "license": "Apache-2.0",
      "maintainer": "Kubernetes SIG Apps",
      "covers": [
        "Kubernetes",
        "Agent runtimes",
        "gVisor",
        "Kata Containers"
      ],
      "homepage": "https://agent-sandbox.sigs.k8s.io",
      "added": "2026-10-10",
      "checked": "2026-10-12"
    },
    {
      "slug": "nono",
      "name": "nono",
      "repo": "nolabs-ai/nono",
      "kind": "sandbox",
      "description": "Least-privilege sandbox for AI coding agents, with no container, VM or daemon. Hides SSH keys, cloud credentials and the rest of the disk from the agent. Delegated tools get their own policies.",
      "license": "Apache-2.0",
      "maintainer": "nolabs, inc",
      "covers": [
        "Claude Code",
        "Codex",
        "OpenCode",
        "OpenClaw"
      ],
      "homepage": "https://docs.nono.sh",
      "added": "2026-10-11",
      "checked": "2026-10-12"
    }
  ]
}