coding-agent-audit 0.3.0__tar.gz → 0.3.2__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {coding_agent_audit-0.3.0/src/coding_agent_audit.egg-info → coding_agent_audit-0.3.2}/PKG-INFO +6 -3
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/README.md +5 -2
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/pyproject.toml +2 -1
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/agentaudit/__init__.py +1 -1
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2/src/coding_agent_audit.egg-info}/PKG-INFO +6 -3
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/coding_agent_audit.egg-info/entry_points.txt +1 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/LICENSE +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/setup.cfg +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/agentaudit/checks.py +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/agentaudit/cli.py +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/agentaudit/configscan.py +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/agentaudit/findings.py +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/agentaudit/iocs.py +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/agentaudit/mcp_server.py +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/coding_agent_audit.egg-info/SOURCES.txt +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/coding_agent_audit.egg-info/dependency_links.txt +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/coding_agent_audit.egg-info/requires.txt +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/coding_agent_audit.egg-info/top_level.txt +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/tests/test_checks.py +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/tests/test_cli.py +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/tests/test_configscan.py +0 -0
- {coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/tests/test_mcp_server.py +0 -0
{coding_agent_audit-0.3.0/src/coding_agent_audit.egg-info → coding_agent_audit-0.3.2}/PKG-INFO
RENAMED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.4
|
|
2
2
|
Name: coding-agent-audit
|
|
3
|
-
Version: 0.3.
|
|
3
|
+
Version: 0.3.2
|
|
4
4
|
Summary: Scan your machine for known AI-coding-assistant supply-chain backdoor indicators (Claude Code / Cursor / Windsurf extensions, MCP servers) plus risky hook/permission config patterns. Usable as a CLI or as an MCP server.
|
|
5
5
|
Author-email: StackScribe AI <survivalagent320@gmail.com>
|
|
6
6
|
License: MIT
|
|
@@ -21,6 +21,8 @@ Dynamic: license-file
|
|
|
21
21
|
|
|
22
22
|
# coding-agent-audit
|
|
23
23
|
|
|
24
|
+
<!-- mcp-name: io.github.stackscribe-ai/coding-agent-audit -->
|
|
25
|
+
|
|
24
26
|
A small, open-source CLI that scans your machine for:
|
|
25
27
|
|
|
26
28
|
1. **Known indicators of compromise (IOCs)** from publicly documented
|
|
@@ -131,14 +133,15 @@ any MCP client. Add this to your client's MCP config (e.g. Claude Desktop's
|
|
|
131
133
|
"mcpServers": {
|
|
132
134
|
"coding-agent-audit": {
|
|
133
135
|
"command": "uvx",
|
|
134
|
-
"args": ["
|
|
136
|
+
"args": ["coding-agent-audit"]
|
|
135
137
|
}
|
|
136
138
|
}
|
|
137
139
|
}
|
|
138
140
|
```
|
|
139
141
|
|
|
140
142
|
(No `uv`? `pip install coding-agent-audit` then use `"command": "agent-audit-mcp"`
|
|
141
|
-
with no `args
|
|
143
|
+
with no `args` — same server, explicit entry-point name.) This exposes two
|
|
144
|
+
tools, `scan_for_known_backdoors` and
|
|
142
145
|
`scan_mcp_config`, so you can just ask your assistant "scan my machine for
|
|
143
146
|
AI coding assistant backdoors" and read the result in the chat — same
|
|
144
147
|
heuristics as the CLI above, nothing installed beyond the server itself.
|
|
@@ -1,5 +1,7 @@
|
|
|
1
1
|
# coding-agent-audit
|
|
2
2
|
|
|
3
|
+
<!-- mcp-name: io.github.stackscribe-ai/coding-agent-audit -->
|
|
4
|
+
|
|
3
5
|
A small, open-source CLI that scans your machine for:
|
|
4
6
|
|
|
5
7
|
1. **Known indicators of compromise (IOCs)** from publicly documented
|
|
@@ -110,14 +112,15 @@ any MCP client. Add this to your client's MCP config (e.g. Claude Desktop's
|
|
|
110
112
|
"mcpServers": {
|
|
111
113
|
"coding-agent-audit": {
|
|
112
114
|
"command": "uvx",
|
|
113
|
-
"args": ["
|
|
115
|
+
"args": ["coding-agent-audit"]
|
|
114
116
|
}
|
|
115
117
|
}
|
|
116
118
|
}
|
|
117
119
|
```
|
|
118
120
|
|
|
119
121
|
(No `uv`? `pip install coding-agent-audit` then use `"command": "agent-audit-mcp"`
|
|
120
|
-
with no `args
|
|
122
|
+
with no `args` — same server, explicit entry-point name.) This exposes two
|
|
123
|
+
tools, `scan_for_known_backdoors` and
|
|
121
124
|
`scan_mcp_config`, so you can just ask your assistant "scan my machine for
|
|
122
125
|
AI coding assistant backdoors" and read the result in the chat — same
|
|
123
126
|
heuristics as the CLI above, nothing installed beyond the server itself.
|
|
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
|
|
|
4
4
|
|
|
5
5
|
[project]
|
|
6
6
|
name = "coding-agent-audit"
|
|
7
|
-
version = "0.3.
|
|
7
|
+
version = "0.3.2"
|
|
8
8
|
description = "Scan your machine for known AI-coding-assistant supply-chain backdoor indicators (Claude Code / Cursor / Windsurf extensions, MCP servers) plus risky hook/permission config patterns. Usable as a CLI or as an MCP server."
|
|
9
9
|
readme = "README.md"
|
|
10
10
|
requires-python = ">=3.9"
|
|
@@ -30,6 +30,7 @@ Homepage = "https://github.com/stackscribe-ai/coding-agent-audit"
|
|
|
30
30
|
[project.scripts]
|
|
31
31
|
agent-audit = "agentaudit.cli:main"
|
|
32
32
|
agent-audit-mcp = "agentaudit.mcp_server:main"
|
|
33
|
+
coding-agent-audit = "agentaudit.mcp_server:main"
|
|
33
34
|
|
|
34
35
|
[tool.setuptools.packages.find]
|
|
35
36
|
where = ["src"]
|
{coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2/src/coding_agent_audit.egg-info}/PKG-INFO
RENAMED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.4
|
|
2
2
|
Name: coding-agent-audit
|
|
3
|
-
Version: 0.3.
|
|
3
|
+
Version: 0.3.2
|
|
4
4
|
Summary: Scan your machine for known AI-coding-assistant supply-chain backdoor indicators (Claude Code / Cursor / Windsurf extensions, MCP servers) plus risky hook/permission config patterns. Usable as a CLI or as an MCP server.
|
|
5
5
|
Author-email: StackScribe AI <survivalagent320@gmail.com>
|
|
6
6
|
License: MIT
|
|
@@ -21,6 +21,8 @@ Dynamic: license-file
|
|
|
21
21
|
|
|
22
22
|
# coding-agent-audit
|
|
23
23
|
|
|
24
|
+
<!-- mcp-name: io.github.stackscribe-ai/coding-agent-audit -->
|
|
25
|
+
|
|
24
26
|
A small, open-source CLI that scans your machine for:
|
|
25
27
|
|
|
26
28
|
1. **Known indicators of compromise (IOCs)** from publicly documented
|
|
@@ -131,14 +133,15 @@ any MCP client. Add this to your client's MCP config (e.g. Claude Desktop's
|
|
|
131
133
|
"mcpServers": {
|
|
132
134
|
"coding-agent-audit": {
|
|
133
135
|
"command": "uvx",
|
|
134
|
-
"args": ["
|
|
136
|
+
"args": ["coding-agent-audit"]
|
|
135
137
|
}
|
|
136
138
|
}
|
|
137
139
|
}
|
|
138
140
|
```
|
|
139
141
|
|
|
140
142
|
(No `uv`? `pip install coding-agent-audit` then use `"command": "agent-audit-mcp"`
|
|
141
|
-
with no `args
|
|
143
|
+
with no `args` — same server, explicit entry-point name.) This exposes two
|
|
144
|
+
tools, `scan_for_known_backdoors` and
|
|
142
145
|
`scan_mcp_config`, so you can just ask your assistant "scan my machine for
|
|
143
146
|
AI coding assistant backdoors" and read the result in the chat — same
|
|
144
147
|
heuristics as the CLI above, nothing installed beyond the server itself.
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
{coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/coding_agent_audit.egg-info/SOURCES.txt
RENAMED
|
File without changes
|
|
File without changes
|
{coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/coding_agent_audit.egg-info/requires.txt
RENAMED
|
File without changes
|
{coding_agent_audit-0.3.0 → coding_agent_audit-0.3.2}/src/coding_agent_audit.egg-info/top_level.txt
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|