agentsec-cli 0.1.0__py3-none-any.whl

agentsec_cli-0.1.0.dist-info/METADATA

@@ -0,0 +1,161 @@
+Metadata-Version: 2.4
+Name: agentsec-cli
+Version: 0.1.0
+Summary: Static security scanner for AI coding agents and MCP configurations
+Author-email: locface <locface@example.com>
+License: MIT
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: click>=8.0.0
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: toml>=0.10.2
+Provides-Extra: dev
+Requires-Dist: pytest>=7.0.0; extra == "dev"
+Dynamic: license-file
+
+# AgentSec
+
+**Static security scanner for AI coding agents and MCP configurations.**
+
+AgentSec finds dangerous permissions, prompt injection risks, secret exposure, and unsafe tool access in:
+- **Cursor** agent configurations
+- **Claude Desktop** MCP servers
+- **Codex** / **Cline** / **Continue** agent setups
+- **MCP** (Model Context Protocol) server manifests
+- **Markdown** instruction files (CLAUDE.md, AGENTS.md, etc.)
+
+## Features
+
+- **40+ security rules** covering shell execution, filesystem access, network exfiltration, OAuth scopes, prompt injection, container escape risks, browser automation, and credential helper exposure
+- **Supports JSON, YAML, TOML, Markdown, Cursor/Claude/Cline/Codex config files** — detects common AI-agent configs in multiple formats
+- **SARIF output** for integration with GitHub CodeQL and other CI/CD tools
+- **GitHub Action** ready (coming soon)
+- **Zero dependencies on LLMs** — purely static analysis
+
+## Installation
+
+```bash
+pip install agentsec
+```
+
+Or from source:
+
+```bash
+git clone https://github.com/locface/AgentSec.git
+cd AgentSec
+pip install -e .
+```
+
+## Usage
+
+### Basic scan
+
+```bash
+agentsec scan /path/to/your/project
+```
+
+### Output formats
+
+```bash
+agentsec scan . --format json          # JSON output
+agentsec scan . --format markdown      # Markdown report
+agentsec scan . --format sarif         # SARIF (for CI/CD)
+```
+
+### Filter by severity
+
+```bash
+agentsec scan . --severity critical   # only critical findings
+```
+
+### Include hidden files
+
+```bash
+agentsec scan . --include-hidden
+```
+
+## Examples
+
+Scan a repository with MCP servers:
+
+```bash
+agentsec scan ~/projects/mcp-servers --format sarif > results.sarif
+```
+
+Scan your current directory for agent configs:
+
+```bash
+agentsec scan . --include-hidden --format markdown > report.md
+```
+
+## Rules
+
+AgentSec includes rules for:
+
+| Severity | Examples |
+|----------|----------|
+| **Critical** | MCP shell execution, filesystem write access, secret exposure, Docker socket access, privileged containers, host mounts, dynamic code execution |
+| **High** | Broad path access, prompt injection, remote script install, communication write permissions, browser + local file access, wildcard tool allowlists |
+| **Medium** | Unpinned dependencies, excessive autonomy, telemetry endpoints, missing input validation |
+| **Low** | Missing policy file |
+
+## Supported config files
+
+AgentSec scans common AI-agent and MCP files, including:
+
+- `mcp.json`, `mcp.yaml`, `mcp.yml`, `mcp.toml`, `mcp-config.json`
+- `claude_desktop_config.json`, `CLAUDE.md`, `AGENTS.md`
+- `.cursorrules`, `.cursor/rules/*`, `.clinerules`, `cline_mcp`, `codex.toml`
+- `settings.json`, `package.json`, `requirements.txt`, `Dockerfile`, `docker-compose.yml`
+
+See [`agentsec/rules/additional.py`](https://github.com/locface/AgentSec/blob/main/agentsec/rules/additional.py) for the complete list.
+
+## CI/CD Integration
+
+Add AgentSec to your GitHub workflow:
+
+```yaml
+- name: Run AgentSec
+  run: |
+    pip install agentsec
+    agentsec scan . --format sarif > results.sarif
+
+- name: Upload SARIF to GitHub CodeQL
+  uses: github/codeql-action/upload-sarif@v3
+  with:
+    sarif_file: results.sarif
+```
+
+## Development
+
+```bash
+# Install dev dependencies
+pip install -e .[dev]
+
+# Run tests
+pytest
+
+# Build package
+python -m build
+```
+
+## Documentation
+
+- **[Landing Page](https://locface.github.io/AgentSec/)** — interactive demo, features, OWASP mapping, CI/CD setup
+- **[Full Documentation](https://locface.github.io/AgentSec/docs/)** — installation, usage, rules reference, FAQ
+
+## License
+
+MIT © 2026 locface
+
+## Status
+
+**Alpha** — under active development. Contributions welcome!

agentsec_cli-0.1.0.dist-info/RECORD

@@ -0,0 +1,21 @@
+agentsec/__init__.py,sha256=FHAqLNU8sxnbp4kblsUM0oJ6eTlgBmRyiitPmKtgcw4,101
+agentsec/baseline.py,sha256=3o6IUMuyVezgsrhxfpAwi_3jTIzq0trD4SkkLVptDRM,1844
+agentsec/cli.py,sha256=1ytxTKQICmfc7pbikx2FOpGGAF22DJsAo3qk2suH27Y,4056
+agentsec/owasp.py,sha256=UynIrWGIwsDqiGgya_7Zc2sr2UqUf4D9yOtOlzMbBUM,8438
+agentsec/report.py,sha256=hD_AHQpQUO52z7pl4bX3KDdA2YJIWcPZewS-9r8vSak,1615
+agentsec/sarif.py,sha256=KgdjLyVX9Vc_e3IgWzapRD9iPGpf-MVE-7LCp2L5ADA,3688
+agentsec/scanner.py,sha256=oP5d2-nZxVHSKEzenMUI1a2h-_58LXR-bsTV2hIlNBw,5310
+agentsec/parsers/__init__.py,sha256=PjzT2Eh7dMNKB-PRFkn2BhKZtF9TA3N6Bxe8fcvgiwc,89
+agentsec/parsers/core.py,sha256=P26psKAPBw-gQryUMML98tFYaJ-EUTdsdbUUE7A8ND8,210
+agentsec/parsers/json_parser.py,sha256=698AIBHgzqAWU9MAI4aZfhiWypdGeCfN7sXU4TN9VkE,3007
+agentsec/parsers/toml_parser.py,sha256=a588P8VDFvuKOlc0jU3MYulFFx7HEP0APROMJ7UU-z0,1011
+agentsec/parsers/yaml_parser.py,sha256=rCZAFWc0kYl3-_cfHIVxAYk_sLlOREtKpESnCw1bHFs,987
+agentsec/rules/__init__.py,sha256=SfLPIcx-L1FZIYYCGlw1JSL35YQadgiDy3L5JSZtk3o,105
+agentsec/rules/additional.py,sha256=XRjXxunPP8rUZw71ZDZ9NCjbE_VNhDITp6v9L4cVFnM,13076
+agentsec/rules/base.py,sha256=UjpgoK_FeL6fskrskM3FG9gPj24udib4MjycGP6gsaU,4812
+agentsec_cli-0.1.0.dist-info/licenses/LICENSE,sha256=bt_LAfJPwg4u0zIdf9InKyUfv8ElnUa78MVKbIUiw7I,1064
+agentsec_cli-0.1.0.dist-info/METADATA,sha256=SkR4L53ktFBfI3oF2CN4gDpFo3lX8ksNIhp_s6CV5jg,4463
+agentsec_cli-0.1.0.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
+agentsec_cli-0.1.0.dist-info/entry_points.txt,sha256=wWeADoDpLlxjO2L-QQB442BAA32zuwFvL0XC7ze9mu8,46
+agentsec_cli-0.1.0.dist-info/top_level.txt,sha256=8ta4DdPLaAds-o8VoEZ7-u1xaGcscNFUtNf_6yZYQnU,9
+agentsec_cli-0.1.0.dist-info/RECORD,,

agentsec_cli-0.1.0.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (82.0.1)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

agentsec_cli-0.1.0.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+agentsec = agentsec.cli:cli

agentsec_cli-0.1.0.dist-info/licenses/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 locface
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

agentsec_cli-0.1.0.dist-info/top_level.txt

@@ -0,0 +1 @@
+agentsec