aig-agent-scan 0.1.0__py3-none-any.whl

agent_scan/__init__.py

@@ -0,0 +1,16 @@
+"""aig-agent-scan - AI Agent Security Scanning Tool.
+
+A dynamic black-box security testing tool for running AI Agent platforms
+(e.g., Dify, Coze, OpenAI-compatible applications). It connects to the target
+agent via API, sends crafted test prompts, and analyzes responses to discover
+security vulnerabilities.
+
+Public API:
+    from agent_scan.core.agent import Agent
+    from agent_scan.utils.llm import LLM
+"""
+
+from __future__ import annotations
+
+__version__ = "0.1.0"
+__all__ = ["__version__"]

agent_scan/__main__.py

@@ -0,0 +1,4 @@
+from agent_scan.main import cli
+
+if __name__ == "__main__":
+    cli()

agent_scan/config/provider_config_en.json

@@ -0,0 +1,254 @@
+{
+  "http": {
+    "name": "HTTP Endpoint",
+    "icon": "/images/agents-icon/http.webp",
+    "description": "Configure HTTP endpoint to send requests",
+    "fields": [
+      {
+        "field": "label",
+        "label": "Agent Name",
+        "type": "text",
+        "required": true,
+        "placeholder": "Enter a descriptive name for this agent(Letters and numbers only)",
+        "description": "A descriptive name for this agent"
+      },
+      {
+        "field": "url",
+        "label": "URL",
+        "type": "text",
+        "required": true,
+        "placeholder": "https://api.example.com/chat",
+        "description": "The HTTP endpoint URL to send requests to"
+      },
+      {
+        "field": "method",
+        "label": "HTTP Method",
+        "type": "select",
+        "required": true,
+        "options": [
+          { "label": "POST", "value": "POST" },
+          { "label": "GET", "value": "GET" },
+          { "label": "PUT", "value": "PUT" },
+          { "label": "PATCH", "value": "PATCH" },
+          { "label": "DELETE", "value": "DELETE" }
+        ],
+        "defaultValue": "POST",
+        "description": "HTTP request method"
+      },
+      {
+        "field": "headers",
+        "label": "Headers",
+        "type": "json",
+        "required": false,
+        "placeholder": "{\n  \"Content-Type\": \"application/json\"\n}",
+        "defaultValue": "{\n  \"Content-Type\": \"application/json\"\n}",
+        "rows": 4,
+        "description": "HTTP headers in JSON format"
+      },
+      {
+        "field": "body",
+        "label": "Request Body",
+        "type": "textarea",
+        "required": false,
+        "placeholder": "{\n  \"message\": \"{{prompt}}\"\n}",
+        "defaultValue": "{\n  \"message\": \"{{prompt}}\"\n}",
+        "rows": 6,
+        "description": "Request body template. Use {{prompt}} for the test input"
+      },
+      {
+        "field": "transform_response",
+        "label": "Response Parser",
+        "type": "text",
+        "required": false,
+        "placeholder": "json.choices[0].message.content",
+        "description": "JSONPath to extract the response (optional)"
+      },
+      {
+        "field": "timeout_ms",
+        "label": "Timeout (ms)",
+        "type": "number",
+        "required": false,
+        "min": 1000,
+        "max": 300000,
+        "step": 1000,
+        "defaultValue": 30000,
+        "description": "Request timeout in milliseconds"
+      }
+    ]
+  },
+  "dify": {
+    "name": "Dify AI",
+    "icon": "/images/agents-icon/dify.webp",
+    "description": "Configure Dify AI platform",
+    "fields": [
+      {
+        "field": "label",
+        "label": "Agent Name",
+        "type": "text",
+        "required": true,
+        "placeholder": "Enter a descriptive name for this agent(Letters and numbers only)",
+        "description": "A descriptive name for this agent"
+      },
+      {
+        "field": "extra.dify_type",
+        "label": "Dify Endpoint Type",
+        "type": "select",
+        "required": false,
+        "options": [
+          { "label": "Chat Messages", "value": "chat" },
+          { "label": "Workflow", "value": "workflow" }
+        ],
+        "defaultValue": "chat",
+        "description": "Chat Messages for conversational apps, Workflow for workflow execution"
+      },
+      {
+        "field": "apiBaseUrl",
+        "label": "API Base URL",
+        "type": "text",
+        "required": false,
+        "placeholder": "https://api.dify.ai/v1",
+        "description": "Dify API base URL. Leave empty to use default"
+      },
+      {
+        "field": "apiKey",
+        "label": "API-Key",
+        "type": "password",
+        "required": true,
+        "placeholder": "app-xxxx",
+        "description": "Dify API-Key"
+      },
+      {
+        "field": "extra.user",
+        "label": "User ID",
+        "type": "text",
+        "required": false,
+        "defaultValue": "agent-user",
+        "description": "User identifier for the conversation"
+      },
+      {
+        "field": "extra.conversation_id",
+        "label": "Conversation ID",
+        "type": "text",
+        "required": false,
+        "placeholder": "Leave empty to start a new conversation",
+        "description": "Leave empty to start a new conversation, or provide an existing conversation ID"
+      },
+      {
+        "field": "extra.inputs",
+        "label": "Custom Inputs",
+        "type": "json",
+        "required": false,
+        "placeholder": "{}",
+        "defaultValue": "{}",
+        "rows": 4,
+        "description": "Custom inputs that will be passed to the Dify app/workflow (JSON format)"
+      },
+      {
+        "field": "timeout_ms",
+        "label": "Timeout (ms)",
+        "type": "number",
+        "required": false,
+        "min": 1000,
+        "max": 300000,
+        "step": 1000,
+        "defaultValue": 60000,
+        "description": "Request timeout in milliseconds"
+      }
+    ]
+  },
+  "coze": {
+    "name": "Coze AI",
+    "icon": "/images/agents-icon/coze.png",
+    "description": "Configure Coze AI bot platform",
+    "fields": [
+      {
+        "field": "label",
+        "label": "Agent Name",
+        "type": "text",
+        "required": true,
+        "placeholder": "Enter a descriptive name for this agent(Letters and numbers only)",
+        "description": "A descriptive name for this agent"
+      },
+      {
+        "field": "extra.coze_region",
+        "label": "Coze Region",
+        "type": "select",
+        "required": false,
+        "options": [
+          { "label": "China (api.coze.cn)", "value": "coze-cn" },
+          { "label": "International (api.coze.com)", "value": "coze-com" }
+        ],
+        "defaultValue": "coze-cn",
+        "description": "Select the Coze API region"
+      },
+      {
+        "field": "extra.bot_id",
+        "label": "Bot ID",
+        "type": "text",
+        "required": true,
+        "placeholder": "Enter your Coze Bot ID",
+        "description": "Required. Your Coze bot ID from the Coze platform"
+      },
+      {
+        "field": "apiBaseUrl",
+        "label": "API Base URL",
+        "type": "text",
+        "required": false,
+        "placeholder": "https://api.coze.cn",
+        "description": "Coze API base URL. Leave empty to use default based on region"
+      },
+      {
+        "field": "apiKey",
+        "label": "API-Key",
+        "type": "password",
+        "required": true,
+        "placeholder": "pat_xxxx",
+        "description": "Coze API-Key"
+      },
+      {
+        "field": "extra.user_id",
+        "label": "User ID",
+        "type": "text",
+        "required": false,
+        "defaultValue": "agent-user",
+        "description": "User identifier for the conversation"
+      },
+      {
+        "field": "extra.conversation_id",
+        "label": "Conversation ID",
+        "type": "text",
+        "required": false,
+        "placeholder": "Leave empty to start a new conversation",
+        "description": "Leave empty to start a new conversation, or provide an existing conversation ID"
+      },
+      {
+        "field": "timeout_ms",
+        "label": "Timeout (ms)",
+        "type": "number",
+        "required": false,
+        "min": 1000,
+        "max": 300000,
+        "step": 1000,
+        "defaultValue": 120000,
+        "description": "Request timeout in milliseconds (default: 120000ms = 2 minutes)"
+      }
+    ]
+  },
+  "common": {
+    "name": "Common Configuration",
+    "description": "Common configuration options for all provider types",
+    "fields": [
+      {
+        "field": "delay",
+        "label": "Delay (ms)",
+        "type": "number",
+        "required": false,
+        "min": 0,
+        "max": 60000,
+        "step": 100,
+        "defaultValue": 0,
+        "description": "Delay between requests in milliseconds to simulate a real user"
+      }
+    ]
+  }
+}

agent_scan/config/provider_config_zh.json

@@ -0,0 +1,254 @@
+{
+  "http": {
+    "name": "HTTP接口",
+    "icon": "/images/agents-icon/http.webp",
+    "description": "配置HTTP端点以发送请求",
+    "fields": [
+      {
+        "field": "label",
+        "label": "Agent名称",
+        "type": "text",
+        "required": true,
+        "placeholder": "为此Agent输入自定义名称（支持英文及数字）",
+        "description": "此Agent的描述名称"
+      },
+      {
+        "field": "url",
+        "label": "URL",
+        "type": "text",
+        "required": true,
+        "placeholder": "https://api.example.com/chat",
+        "description": "要发送请求的HTTP端点URL"
+      },
+      {
+        "field": "method",
+        "label": "HTTP方法",
+        "type": "select",
+        "required": true,
+        "options": [
+          { "label": "POST", "value": "POST" },
+          { "label": "GET", "value": "GET" },
+          { "label": "PUT", "value": "PUT" },
+          { "label": "PATCH", "value": "PATCH" },
+          { "label": "DELETE", "value": "DELETE" }
+        ],
+        "defaultValue": "POST",
+        "description": "HTTP请求方法"
+      },
+      {
+        "field": "headers",
+        "label": "请求头",
+        "type": "json",
+        "required": false,
+        "placeholder": "{\n  \"Content-Type\": \"application/json\"\n}",
+        "defaultValue": "{\n  \"Content-Type\": \"application/json\"\n}",
+        "rows": 4,
+        "description": "JSON格式的HTTP请求头"
+      },
+      {
+        "field": "body",
+        "label": "请求体",
+        "type": "textarea",
+        "required": false,
+        "placeholder": "{\n  \"message\": \"{{prompt}}\"\n}",
+        "defaultValue": "{\n  \"message\": \"{{prompt}}\"\n}",
+        "rows": 6,
+        "description": "请求体模板。使用 {{prompt}} 作为测试输入的占位符"
+      },
+      {
+        "field": "transform_response",
+        "label": "响应解析器",
+        "type": "text",
+        "required": false,
+        "placeholder": "json.choices[0].message.content",
+        "description": "用于提取响应的JSONPath（可选）"
+      },
+      {
+        "field": "timeout_ms",
+        "label": "超时时间（毫秒）",
+        "type": "number",
+        "required": false,
+        "min": 1000,
+        "max": 300000,
+        "step": 1000,
+        "defaultValue": 30000,
+        "description": "请求超时时间（毫秒）"
+      }
+    ]
+  },
+  "dify": {
+    "name": "Dify AI",
+    "icon": "/images/agents-icon/dify.webp",
+    "description": "配置Dify AI平台",
+    "fields": [
+      {
+        "field": "label",
+        "label": "Agent名称",
+        "type": "text",
+        "required": true,
+        "placeholder": "为此Agent输入自定义名称（支持英文及数字）",
+        "description": "此Agent的描述名称"
+      },
+      {
+        "field": "extra.dify_type",
+        "label": "Dify端点类型",
+        "type": "select",
+        "required": false,
+        "options": [
+          { "label": "聊天消息", "value": "chat" },
+          { "label": "工作流", "value": "workflow" }
+        ],
+        "defaultValue": "chat",
+        "description": "聊天消息用于对话应用，工作流用于工作流执行"
+      },
+      {
+        "field": "apiBaseUrl",
+        "label": "API基础URL",
+        "type": "text",
+        "required": false,
+        "placeholder": "https://api.dify.ai/v1",
+        "description": "Dify API基础URL。留空使用默认值"
+      },
+      {
+        "field": "apiKey",
+        "label": "API-Key",
+        "type": "password",
+        "required": true,
+        "placeholder": "app-xxxx",
+        "description": "Dify API-Key"
+      },
+      {
+        "field": "extra.user",
+        "label": "用户ID",
+        "type": "text",
+        "required": false,
+        "defaultValue": "agent-user",
+        "description": "对话的用户标识符"
+      },
+      {
+        "field": "extra.conversation_id",
+        "label": "对话ID",
+        "type": "text",
+        "required": false,
+        "placeholder": "留空开始新对话",
+        "description": "留空开始新对话，或提供现有对话ID"
+      },
+      {
+        "field": "extra.inputs",
+        "label": "自定义输入",
+        "type": "json",
+        "required": false,
+        "placeholder": "{}",
+        "defaultValue": "{}",
+        "rows": 4,
+        "description": "将传递给Dify应用/工作流的自定义输入（JSON格式）"
+      },
+      {
+        "field": "timeout_ms",
+        "label": "超时时间（毫秒）",
+        "type": "number",
+        "required": false,
+        "min": 1000,
+        "max": 300000,
+        "step": 1000,
+        "defaultValue": 60000,
+        "description": "请求超时时间（毫秒）"
+      }
+    ]
+  },
+  "coze": {
+    "name": "Coze AI",
+    "icon": "/images/agents-icon/coze.png",
+    "description": "配置Coze AI机器人平台",
+    "fields": [
+      {
+        "field": "label",
+        "label": "Agent名称",
+        "type": "text",
+        "required": true,
+        "placeholder": "为此Agent输入自定义名称（支持英文及数字）",
+        "description": "此Agent的描述名称"
+      },
+      {
+        "field": "extra.coze_region",
+        "label": "Coze区域",
+        "type": "select",
+        "required": false,
+        "options": [
+          { "label": "中国 (api.coze.cn)", "value": "coze-cn" },
+          { "label": "国际 (api.coze.com)", "value": "coze-com" }
+        ],
+        "defaultValue": "coze-cn",
+        "description": "选择Coze API区域"
+      },
+      {
+        "field": "extra.bot_id",
+        "label": "Bot ID",
+        "type": "text",
+        "required": true,
+        "placeholder": "输入您的Coze Bot ID",
+        "description": "必填。来自Coze平台的Bot ID"
+      },
+      {
+        "field": "apiBaseUrl",
+        "label": "API基础URL",
+        "type": "text",
+        "required": false,
+        "placeholder": "https://api.coze.cn",
+        "description": "Coze API基础URL。留空根据区域使用默认值"
+      },
+      {
+        "field": "apiKey",
+        "label": "API-Key",
+        "type": "password",
+        "required": true,
+        "placeholder": "pat_xxxx",
+        "description": "Coze API-Key"
+      },
+      {
+        "field": "extra.user_id",
+        "label": "用户ID",
+        "type": "text",
+        "required": false,
+        "defaultValue": "agent-user",
+        "description": "对话的用户标识符"
+      },
+      {
+        "field": "extra.conversation_id",
+        "label": "对话ID",
+        "type": "text",
+        "required": false,
+        "placeholder": "留空开始新对话",
+        "description": "留空开始新对话，或提供现有对话ID"
+      },
+      {
+        "field": "timeout_ms",
+        "label": "超时时间（毫秒）",
+        "type": "number",
+        "required": false,
+        "min": 1000,
+        "max": 300000,
+        "step": 1000,
+        "defaultValue": 120000,
+        "description": "请求超时时间（毫秒，默认：120000ms = 2分钟）"
+      }
+    ]
+  },
+  "common": {
+    "name": "通用配置",
+    "description": "所有provider类型的通用配置选项",
+    "fields": [
+      {
+        "field": "delay",
+        "label": "延迟（毫秒）",
+        "type": "number",
+        "required": false,
+        "min": 0,
+        "max": 60000,
+        "step": 100,
+        "defaultValue": 0,
+        "description": "请求之间的延迟时间（毫秒），用于模拟真实用户"
+      }
+    ]
+  }
+}

agent_scan/core/__init__.py

@@ -0,0 +1,18 @@
+# Copyright (c) 2024-2026 Tencent Zhuque Lab. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# Requirement: Any integration or derivative work must explicitly attribute
+# Tencent Zhuque Lab (https://github.com/Tencent/AI-Infra-Guard) in its
+# documentation or user interface, as detailed in the NOTICE file.
+