{"slug": "agentsec-audit", "title": "AgentSec Audit", "summary": "AgentSec Audit launched as an automated security scanner, policy linter, and compliance certification tool for autonomous AI agents, tool configurations, and Model Context Protocol (MCP) servers. The tool enforces the OWASP Top 10 for Agentic Applications (2026 ASI01–ASI10) and targets ISO 42001 and SOC 2 Type II processing integrity audits, detecting arbitrary shell/eval execution, goal hijacking vectors, unbounded delegation depth, and unsanitized memory write loops. AgentSec Audit exposes an audit_agent_config interface over stdio JSON-RPC for Hermes Desktop, Claude Code, and Codex, and ships with GitHub Actions CI/CD gating via hicklax13/agentsec-audit@v1.", "body_md": "Automated security scanning, policy linting, and compliance certification for autonomous AI agents, tool configurations, and Model Context Protocol (MCP) servers.\n\nBuilt for the **OWASP Top 10 for Agentic Applications (2026 ASI01–ASI10)** and **ISO 42001 / SOC 2 Type II** processing integrity audits.\n\n- **Deterministic Static AST & Schema Linter:** Scans system prompts, function calling schemas, and MCP tool declarations.\n- **OWASP ASI-10 Rule Enforcement:** Detects arbitrary shell/eval execution, goal hijacking vectors, unbounded delegation depth, and unsanitized memory write loops.\n- **Native MCP Interface:** Exposes`audit_agent_config` over stdio JSON-RPC so Hermes Desktop, Claude Code, and Codex can audit agents natively.\n- **Turnkey CI/CD:** Ready for GitHub Actions with automated PR pass/fail gating.\n\n```\ngit clone https://github.com/hicklax13/agentsec-audit.git\ncd agentsec-audit\npip install -r requirements.txt\npython -m src.cli scan ./sample_agent.json --format html --out report.html\n```\n\nAdd this to your repository workflow:\n\n```\nname: AgentSec Compliance Check\non: [push, pull_request]\n\njobs:\n  audit:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n      - uses: hicklax13/agentsec-audit@v1\n        with:\n          config-path: \"agent.json\"\n          fail-on-violation: \"true\"\n```\n\n", "url": "https://wpnews.pro/news/agentsec-audit", "canonical_source": "https://github.com/hicklax13/agentsec-audit", "published_at": "2026-09-20 06:07:37+00:00", "updated_at": "2026-09-20 06:22:52.376289+00:00", "lang": "en", "topics": ["ai-safety", "ai-agents", "agent-protocols", "ai-tools", "developer-tools"], "entities": ["AgentSec Audit", "Model Context Protocol", "OWASP", "ISO 42001", "SOC 2 Type II", "Hermes Desktop", "Claude Code", "Codex"], "alternates": {"html": "https://wpnews.pro/news/agentsec-audit", "markdown": "https://wpnews.pro/news/agentsec-audit.md", "text": "https://wpnews.pro/news/agentsec-audit.txt", "jsonld": "https://wpnews.pro/news/agentsec-audit.jsonld"}}