hackmyagent 0.3.1 → 0.3.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +19 -14
- package/dist/index.js +1399 -73
- package/dist/index.js.map +1 -1
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -17,7 +17,7 @@ npx hackmyagent secure # harden your agent setup (100 check
|
|
|
17
17
|
npx hackmyagent secure --fix # auto-fix security issues
|
|
18
18
|
npx hackmyagent scan example.com # scan for exposed infrastructure
|
|
19
19
|
npx hackmyagent attack --local # red team with 55 attack payloads
|
|
20
|
-
npx hackmyagent
|
|
20
|
+
npx hackmyagent secure --benchmark oasb-1 # run OASB-1 security benchmark
|
|
21
21
|
```
|
|
22
22
|
|
|
23
23
|
## Two Ways to Scan
|
|
@@ -38,7 +38,7 @@ AI agents are powerful but introduce new attack surfaces. Skills can be maliciou
|
|
|
38
38
|
## Installation
|
|
39
39
|
|
|
40
40
|
```bash
|
|
41
|
-
# Use directly with npx
|
|
41
|
+
# Use directly with npx
|
|
42
42
|
npx hackmyagent secure
|
|
43
43
|
|
|
44
44
|
# Or install globally
|
|
@@ -191,25 +191,30 @@ hackmyagent attack --local --verbose
|
|
|
191
191
|
- 50-69: HIGH - Significant vulnerabilities, action required
|
|
192
192
|
- 70-100: CRITICAL - Severe vulnerabilities, immediate action needed
|
|
193
193
|
|
|
194
|
-
### `hackmyagent benchmark`
|
|
194
|
+
### `hackmyagent secure --benchmark`
|
|
195
195
|
|
|
196
|
-
Run the OASB-1 (
|
|
196
|
+
Run the OASB-1 (Open Agent Security Benchmark) against your agent configuration.
|
|
197
197
|
|
|
198
198
|
```bash
|
|
199
|
-
# Run benchmark
|
|
200
|
-
hackmyagent
|
|
199
|
+
# Run benchmark (L1 by default)
|
|
200
|
+
hackmyagent secure --benchmark oasb-1
|
|
201
201
|
|
|
202
202
|
# Target specific directory
|
|
203
|
-
hackmyagent
|
|
203
|
+
hackmyagent secure ./my-project --benchmark oasb-1
|
|
204
|
+
|
|
205
|
+
# Different maturity levels
|
|
206
|
+
hackmyagent secure -b oasb-1 -l L1 # Essential (baseline)
|
|
207
|
+
hackmyagent secure -b oasb-1 -l L2 # Standard
|
|
208
|
+
hackmyagent secure -b oasb-1 -l L3 # Hardened
|
|
204
209
|
|
|
205
210
|
# Output formats
|
|
206
|
-
hackmyagent
|
|
207
|
-
hackmyagent
|
|
208
|
-
hackmyagent
|
|
209
|
-
hackmyagent
|
|
211
|
+
hackmyagent secure -b oasb-1 -f json
|
|
212
|
+
hackmyagent secure -b oasb-1 -f sarif -o results.sarif
|
|
213
|
+
hackmyagent secure -b oasb-1 -f html -o report.html
|
|
214
|
+
hackmyagent secure -b oasb-1 -f asp -o profile.asp.json
|
|
210
215
|
|
|
211
216
|
# CI/CD with fail threshold
|
|
212
|
-
hackmyagent
|
|
217
|
+
hackmyagent secure -b oasb-1 --fail-below 70
|
|
213
218
|
```
|
|
214
219
|
|
|
215
220
|
**Output Formats:**
|
|
@@ -322,7 +327,7 @@ jobs:
|
|
|
322
327
|
with:
|
|
323
328
|
node-version: '20'
|
|
324
329
|
- name: Run OASB-1 benchmark
|
|
325
|
-
run: npx hackmyagent
|
|
330
|
+
run: npx hackmyagent secure -b oasb-1 --fail-below 70
|
|
326
331
|
```
|
|
327
332
|
|
|
328
333
|
### Pre-commit Hook
|
|
@@ -406,7 +411,7 @@ Contributions welcome! See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.
|
|
|
406
411
|
|
|
407
412
|
```bash
|
|
408
413
|
# Development setup
|
|
409
|
-
git clone https://github.com/
|
|
414
|
+
git clone https://github.com/opena2a-org/hackmyagent.git
|
|
410
415
|
cd hackmyagent
|
|
411
416
|
npm install
|
|
412
417
|
npm run build
|