Catalogue
Submit a toolHarnesses, frameworks, tools, apps, and platforms for agent builders, each scored on real GitHub credibility and each with a credibility-gated forum.
22 tools
ToolSkillSpector
Security
NVIDIA
Security scanner that checks AI agent skills for vulnerabilities, malicious patterns, and supply-chain risks before install
static-analysisvulnerability-scannersupply-chainprompt-injection
ToolAI-Infra-Guard
Security
Tencent
AI red-teaming platform for scanning agents, skills, MCP servers, and infrastructure and evaluating LLM jailbreaks
red-teamprompt-injectionjailbreak-testingvulnerability-scanner
ToolECC
CodingSecurityMemory
affaan-m
The agent harness performance optimization system. Coordinated engineering system and toolbox.
productivityskillvulnerability-scannergithubrollout
ToolPromptfoo
QASecurity
promptfoo
CLI and library for evaluating and red-teaming LLM apps, with side-by-side model comparison and CI/CD checks
eval-harnessred-teamci-cdvulnerability-scanner
ToolSnyk Agent Scan
Security
snyk
Security scanner for AI agents, MCP servers and agent skills.
prompt-injectiontool-poisoningvulnerability-scannersupply-chain
ToolShannon
Security
KeygraphHQ
Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and
penetration-testingred-teamvulnerability-scannerbrowser-automation
ToolGarak
Security
NVIDIA
Command-line vulnerability scanner that probes LLMs for jailbreaks, prompt injection, data leakage, toxicity, and other failures
red-teamprompt-injectionvulnerability-scannercli
ToolStrix
Security
usestrix
Autonomous AI penetration-testing agents that find application vulnerabilities and validate them with working proof-of-concept exploits
penetration-testingred-teamvulnerability-scannerctf
ToolSonarQube MCP Server
CodingSecurity
SonarSource
Official MCP server letting coding agents run SonarQube quality and security analysis on their output
static-analysissonarqubevulnerability-scannercode-review
ToolXalgorix
Security
xalgord
Xalgorix - Autonomous AI Pentesting Agents
penetration-testingvulnerability-scannerred-teamci-integration
ToolOpen Kritt
Security
Kritt-ai
Orchestrate AI agents to find real vulnerabilities in code.
vulnerability-scannersource-code-analysislocal-first
ToolDeepAudit
Security
lintsinghua
DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。
code-auditvulnerability-scannergeminiollama
ToolVigolium
MonitoringSecurity
vigolium
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
vulnerability-scanneroast
ToolAgentic Security
Security
msoedov
Open-source vulnerability scanner that red-teams LLMs and agent workflows with jailbreak, fuzzing, and multimodal probes
red-teamfuzzingvulnerability-scanner
ToolAutoCVE
Security
larlarua
Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.
vulnerability-scannercvecode-auditpenetration-testing
ToolVulnHunter
CodingSecurity
capitalone
Agentic AI security tool that applies proactive, attacker-first analysis directly to source code.
vulnerability-scannerstatic-analysispenetration-testing
ToolLLM Guard
Security
No longer maintained
protectai
Archived security toolkit of composable input and output scanners for prompts and LLM responses
prompt-injectionpiitoxicityguardrails
ToolMedusa
Security
Pantheon-Security
AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — pl
vulnerability-scannerstatic-analysissupply-chain-security
ToolDeepsec
Security
vercel-labs
deepsec from Vercel runs security review as a pipeline that grades its own output. A free regex pass marks candidate fil
vulnerability-scannercode-review
ToolAgentShield
Security
affaan-m
Agent Shield is early, but the direction matters. It scans Claude Code configurations like SAST scans application code …
vulnerability-scannerstatic-analysispermissiongithub
ToolCain Agent
Security
cdxiaodong
Real-world AI penetration testing engineer for authorized assessments — built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Huawei
penetration-testingred-teamcloud-securityvulnerability-scanner
AppOpenWorker
SecurityConnectors
andrewyng
OpenWorker is a local desktop agent built to return finished work, a document or a Slack reply.
desktopvulnerability-scannerslackollama