opentrustbench 0.1.0__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- opentrustbench-0.1.0/MANIFEST.in +2 -0
- opentrustbench-0.1.0/PKG-INFO +48 -0
- opentrustbench-0.1.0/README.md +31 -0
- opentrustbench-0.1.0/opentrustbench/__init__.py +2 -0
- opentrustbench-0.1.0/opentrustbench/cli.py +56 -0
- opentrustbench-0.1.0/opentrustbench.egg-info/PKG-INFO +48 -0
- opentrustbench-0.1.0/opentrustbench.egg-info/SOURCES.txt +10 -0
- opentrustbench-0.1.0/opentrustbench.egg-info/dependency_links.txt +1 -0
- opentrustbench-0.1.0/opentrustbench.egg-info/entry_points.txt +2 -0
- opentrustbench-0.1.0/opentrustbench.egg-info/top_level.txt +1 -0
- opentrustbench-0.1.0/pyproject.toml +28 -0
- opentrustbench-0.1.0/setup.cfg +4 -0
|
@@ -0,0 +1,48 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: opentrustbench
|
|
3
|
+
Version: 0.1.0
|
|
4
|
+
Summary: Open-source AI agent and MCP server security scanner
|
|
5
|
+
Author-email: Eulogik <dev@eulogik.com>
|
|
6
|
+
License-Expression: Apache-2.0
|
|
7
|
+
Project-URL: Homepage, https://www.opentrustbench.com
|
|
8
|
+
Project-URL: Documentation, https://www.opentrustbench.com
|
|
9
|
+
Project-URL: Repository, https://github.com/eulogik/OpenTrustBench
|
|
10
|
+
Keywords: ai,agent,mcp,security,scanner,trust,owasp
|
|
11
|
+
Classifier: Development Status :: 4 - Beta
|
|
12
|
+
Classifier: Intended Audience :: Developers
|
|
13
|
+
Classifier: Programming Language :: Python :: 3
|
|
14
|
+
Classifier: Topic :: Security
|
|
15
|
+
Requires-Python: >=3.9
|
|
16
|
+
Description-Content-Type: text/markdown
|
|
17
|
+
|
|
18
|
+
# OpenTrustBench
|
|
19
|
+
|
|
20
|
+
Open-source AI agent and MCP server security scanner. Graded trust cards (A–F) for AI agents and MCP tool servers.
|
|
21
|
+
|
|
22
|
+
## Installation
|
|
23
|
+
|
|
24
|
+
```bash
|
|
25
|
+
pip install opentrustbench
|
|
26
|
+
```
|
|
27
|
+
|
|
28
|
+
**Prerequisites:** Node.js 18+ and npm must be installed. The npm `@opentrustbench/cli` package will be resolved at runtime.
|
|
29
|
+
|
|
30
|
+
## Usage
|
|
31
|
+
|
|
32
|
+
```bash
|
|
33
|
+
# Scan an AI agent or MCP server
|
|
34
|
+
opentrustbench scan ./my-agent
|
|
35
|
+
|
|
36
|
+
# Generate a Trust Card
|
|
37
|
+
opentrustbench trust ./my-agent
|
|
38
|
+
|
|
39
|
+
# Attack surface analysis
|
|
40
|
+
opentrustbench attack ./my-agent
|
|
41
|
+
|
|
42
|
+
# Dependency audit
|
|
43
|
+
opentrustbench deps ./my-agent
|
|
44
|
+
```
|
|
45
|
+
|
|
46
|
+
## License
|
|
47
|
+
|
|
48
|
+
Apache-2.0
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
# OpenTrustBench
|
|
2
|
+
|
|
3
|
+
Open-source AI agent and MCP server security scanner. Graded trust cards (A–F) for AI agents and MCP tool servers.
|
|
4
|
+
|
|
5
|
+
## Installation
|
|
6
|
+
|
|
7
|
+
```bash
|
|
8
|
+
pip install opentrustbench
|
|
9
|
+
```
|
|
10
|
+
|
|
11
|
+
**Prerequisites:** Node.js 18+ and npm must be installed. The npm `@opentrustbench/cli` package will be resolved at runtime.
|
|
12
|
+
|
|
13
|
+
## Usage
|
|
14
|
+
|
|
15
|
+
```bash
|
|
16
|
+
# Scan an AI agent or MCP server
|
|
17
|
+
opentrustbench scan ./my-agent
|
|
18
|
+
|
|
19
|
+
# Generate a Trust Card
|
|
20
|
+
opentrustbench trust ./my-agent
|
|
21
|
+
|
|
22
|
+
# Attack surface analysis
|
|
23
|
+
opentrustbench attack ./my-agent
|
|
24
|
+
|
|
25
|
+
# Dependency audit
|
|
26
|
+
opentrustbench deps ./my-agent
|
|
27
|
+
```
|
|
28
|
+
|
|
29
|
+
## License
|
|
30
|
+
|
|
31
|
+
Apache-2.0
|
|
@@ -0,0 +1,56 @@
|
|
|
1
|
+
"""OpenTrustBench CLI - delegates to the npm @opentrustbench/cli package."""
|
|
2
|
+
import subprocess
|
|
3
|
+
import shutil
|
|
4
|
+
import sys
|
|
5
|
+
import os
|
|
6
|
+
|
|
7
|
+
def find_npm_binary():
|
|
8
|
+
"""Find the opentrustbench npm binary."""
|
|
9
|
+
# Check if opentrustbench is in PATH
|
|
10
|
+
npm_bin = shutil.which("opentrustbench")
|
|
11
|
+
if npm_bin:
|
|
12
|
+
return npm_bin
|
|
13
|
+
|
|
14
|
+
# Try common npm global locations
|
|
15
|
+
if sys.platform == "win32":
|
|
16
|
+
npm_prefix = subprocess.run(
|
|
17
|
+
["npm", "config", "get", "prefix"],
|
|
18
|
+
capture_output=True, text=True, timeout=10
|
|
19
|
+
).stdout.strip()
|
|
20
|
+
candidate = os.path.join(npm_prefix, "opentrustbench.cmd")
|
|
21
|
+
else:
|
|
22
|
+
npm_prefix = subprocess.run(
|
|
23
|
+
["npm", "config", "get", "prefix"],
|
|
24
|
+
capture_output=True, text=True, timeout=10
|
|
25
|
+
).stdout.strip()
|
|
26
|
+
candidate = os.path.join(npm_prefix, "bin", "opentrustbench")
|
|
27
|
+
|
|
28
|
+
if os.path.exists(candidate):
|
|
29
|
+
return candidate
|
|
30
|
+
|
|
31
|
+
return None
|
|
32
|
+
|
|
33
|
+
def main():
|
|
34
|
+
"""Main entry point - delegates to npm binary."""
|
|
35
|
+
npm_bin = find_npm_binary()
|
|
36
|
+
|
|
37
|
+
if npm_bin is None:
|
|
38
|
+
print("Error: opentrustbench npm package not found.", file=sys.stderr)
|
|
39
|
+
print("Install it with: npm install -g @opentrustbench/cli", file=sys.stderr)
|
|
40
|
+
print("Or install the npm package manually.", file=sys.stderr)
|
|
41
|
+
sys.exit(1)
|
|
42
|
+
|
|
43
|
+
try:
|
|
44
|
+
result = subprocess.run(
|
|
45
|
+
[npm_bin] + sys.argv[1:],
|
|
46
|
+
capture_output=False,
|
|
47
|
+
)
|
|
48
|
+
sys.exit(result.returncode)
|
|
49
|
+
except KeyboardInterrupt:
|
|
50
|
+
sys.exit(130)
|
|
51
|
+
except Exception as e:
|
|
52
|
+
print(f"Error running opentrustbench: {e}", file=sys.stderr)
|
|
53
|
+
sys.exit(1)
|
|
54
|
+
|
|
55
|
+
if __name__ == "__main__":
|
|
56
|
+
main()
|
|
@@ -0,0 +1,48 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: opentrustbench
|
|
3
|
+
Version: 0.1.0
|
|
4
|
+
Summary: Open-source AI agent and MCP server security scanner
|
|
5
|
+
Author-email: Eulogik <dev@eulogik.com>
|
|
6
|
+
License-Expression: Apache-2.0
|
|
7
|
+
Project-URL: Homepage, https://www.opentrustbench.com
|
|
8
|
+
Project-URL: Documentation, https://www.opentrustbench.com
|
|
9
|
+
Project-URL: Repository, https://github.com/eulogik/OpenTrustBench
|
|
10
|
+
Keywords: ai,agent,mcp,security,scanner,trust,owasp
|
|
11
|
+
Classifier: Development Status :: 4 - Beta
|
|
12
|
+
Classifier: Intended Audience :: Developers
|
|
13
|
+
Classifier: Programming Language :: Python :: 3
|
|
14
|
+
Classifier: Topic :: Security
|
|
15
|
+
Requires-Python: >=3.9
|
|
16
|
+
Description-Content-Type: text/markdown
|
|
17
|
+
|
|
18
|
+
# OpenTrustBench
|
|
19
|
+
|
|
20
|
+
Open-source AI agent and MCP server security scanner. Graded trust cards (A–F) for AI agents and MCP tool servers.
|
|
21
|
+
|
|
22
|
+
## Installation
|
|
23
|
+
|
|
24
|
+
```bash
|
|
25
|
+
pip install opentrustbench
|
|
26
|
+
```
|
|
27
|
+
|
|
28
|
+
**Prerequisites:** Node.js 18+ and npm must be installed. The npm `@opentrustbench/cli` package will be resolved at runtime.
|
|
29
|
+
|
|
30
|
+
## Usage
|
|
31
|
+
|
|
32
|
+
```bash
|
|
33
|
+
# Scan an AI agent or MCP server
|
|
34
|
+
opentrustbench scan ./my-agent
|
|
35
|
+
|
|
36
|
+
# Generate a Trust Card
|
|
37
|
+
opentrustbench trust ./my-agent
|
|
38
|
+
|
|
39
|
+
# Attack surface analysis
|
|
40
|
+
opentrustbench attack ./my-agent
|
|
41
|
+
|
|
42
|
+
# Dependency audit
|
|
43
|
+
opentrustbench deps ./my-agent
|
|
44
|
+
```
|
|
45
|
+
|
|
46
|
+
## License
|
|
47
|
+
|
|
48
|
+
Apache-2.0
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
MANIFEST.in
|
|
2
|
+
README.md
|
|
3
|
+
pyproject.toml
|
|
4
|
+
opentrustbench/__init__.py
|
|
5
|
+
opentrustbench/cli.py
|
|
6
|
+
opentrustbench.egg-info/PKG-INFO
|
|
7
|
+
opentrustbench.egg-info/SOURCES.txt
|
|
8
|
+
opentrustbench.egg-info/dependency_links.txt
|
|
9
|
+
opentrustbench.egg-info/entry_points.txt
|
|
10
|
+
opentrustbench.egg-info/top_level.txt
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
opentrustbench
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
[build-system]
|
|
2
|
+
requires = ["setuptools>=64", "wheel"]
|
|
3
|
+
build-backend = "setuptools.build_meta"
|
|
4
|
+
|
|
5
|
+
[project]
|
|
6
|
+
name = "opentrustbench"
|
|
7
|
+
version = "0.1.0"
|
|
8
|
+
description = "Open-source AI agent and MCP server security scanner"
|
|
9
|
+
readme = "README.md"
|
|
10
|
+
license = "Apache-2.0"
|
|
11
|
+
requires-python = ">=3.9"
|
|
12
|
+
authors = [{name = "Eulogik", email = "dev@eulogik.com"}]
|
|
13
|
+
keywords = ["ai", "agent", "mcp", "security", "scanner", "trust", "owasp"]
|
|
14
|
+
classifiers = [
|
|
15
|
+
"Development Status :: 4 - Beta",
|
|
16
|
+
"Intended Audience :: Developers",
|
|
17
|
+
"Programming Language :: Python :: 3",
|
|
18
|
+
"Topic :: Security",
|
|
19
|
+
]
|
|
20
|
+
dependencies = []
|
|
21
|
+
|
|
22
|
+
[project.scripts]
|
|
23
|
+
opentrustbench = "opentrustbench.cli:main"
|
|
24
|
+
|
|
25
|
+
[project.urls]
|
|
26
|
+
Homepage = "https://www.opentrustbench.com"
|
|
27
|
+
Documentation = "https://www.opentrustbench.com"
|
|
28
|
+
Repository = "https://github.com/eulogik/OpenTrustBench"
|