Part of the security infrastructure for AI agents

Security toolkit for AI agents.

318 static checks, 29 semantic checks, 164 adversarial payloads, auto remediation with rollback.

npx hackmyagent secure

Scans in seconds. Auto remediation with rollback. No signup.

What you get back.

One scan. The finding below names its file, line and fix. Run with --fix to auto remediate.

7 of 67 lines from npx hackmyagent secure (hackmyagent 0.33.2), run 2026-09-23 05:45 UTC in a fresh clone of opena2a-org/damn-vulnerable-ai-agent at commit 19edfbf, exit code 1. The target is deliberately vulnerable, so a low score is the expected result.

Terminal

$ npx hackmyagent secure
  damn-vulnerable-ai-agent  v0.9.3 · cli · 472 files read · semantic capped at 200
  9 critical issues found
  Security  ━━━━━━━━━━━━━━━━━━━━ 2/100
  │ CRITICAL  Remote Fetch Pattern
  │ scenarios/skill-backdoor-install/vulnerable/deploy.skill.md:21
  │ Fix: Remove the curl|sh or wget|sh pattern from this file
  Path forward: 2 -> 100 by fixing 9 critical + 28 high

Repository, on GitHub, opens in a new tab

Three modes of operation.

Scan for vulnerabilities. Attack with adversarial payloads. Fix with safe rollback.

Scan

318 static checks plus 29 semantic checks. Detect misconfigurations, hardcoded credentials, exposed endpoints, and supply chain risks.

Credential detection and scope drift
MCP server auditing
AI agent CVE detection
Governance file analysis (SOUL.md, ABGS)

Attack

164 adversarial payloads across 16 categories. Red team your agent with prompt injection, jailbreak, data exfiltration, capability abuse, context manipulation, and more.

Prompt injection (12 payloads)
Jailbreak (12 payloads)
Data exfiltration (11 payloads)
Custom payload support

Fix

Auto remediation with rollback. Dry run preview before applying changes. Automatic backups so any fix can be undone instantly.

Dry run preview mode
Automatic backup creation
One command rollback
Plugin based fix system

Coverage breakdown.

Static, semantic, and adversarial. Three layers across every domain HackMyAgent inspects.

318

Static checks

Semantic checks

164

Adversarial payloads

Credentials and secrets

Hardcoded API keys
Scope drift across providers
Plaintext .env files
Exposed tokens in configs

MCP and tool permissions

MCP server config audit
Root filesystem access
Tool permission boundaries
Skill manifest review

Network and runtime

Bind address exposure
Rate limiting
Process isolation
Sandboxing

Code and supply chain

Dependency vulnerabilities
AI agent CVE detection
Build artifact integrity
Signing and provenance

Governance and policy

SOUL.md scoring (ABGS)
OASB benchmark
Audit trail completeness
Policy enforcement

Identity and session

Authentication checks
Session lifetime
Encryption at rest
Heartbeat and liveness

Quick start.

No config files. Works out of the box. Six commands cover scan, fix, attack, benchmark, and rollback.

Terminal

# Scan everything
npx hackmyagent secure

# Scan and auto remediate
npx hackmyagent secure --fix

# Preview fixes before applying
npx hackmyagent secure --fix --dry-run

# Generate and parse the adversarial payload set (contacts no agent)
npx hackmyagent attack --local

# Run OASB benchmark
npx hackmyagent secure -b oasb-1

# Rollback any changes
npx hackmyagent rollback

Attack categories.

164 adversarial payloads across 16 categories. Five most common patterns shown below.

Prompt Injection

12 payloads

Manipulate agent behavior via injected instructions in user input, retrieved documents, or tool output.

Jailbreak

12 payloads

Bypass safety guardrails and system constraints with persona shifts, hypothetical framing, and role escalation.

Data Exfiltration

11 payloads

Extract sensitive data, system prompts, credentials, or memory contents through indirect channels.

Capability Abuse

10 payloads

Misuse agent tools and capabilities for unintended actions outside the authorized scope.

Context Manipulation

10 payloads

Poison agent context, memory, or retrieval results to alter downstream decisions.

Supported targets.

Auto detects the host, then scans the right surfaces. No flags required.

Claude Code

CLAUDE.md, skills, MCP server configs

Cursor

.cursor/ rules, MCP configurations

VS Code

.vscode/mcp.json configurations

Generic MCP

Any MCP server setup

OASB benchmark compliance.

Run the Open Agent Security Benchmark (OASB-1) directly with npx hackmyagent secure -b oasb-1. 46 controls across 10 categories with 3 maturity levels.

3 maturity levels

L1 Essential

Foundational hardening

26 controls

L2 Standard

Production readiness

44 controls

L3 Hardened

High assurance

46 controls

Learn more about OASB

Secure your agents.

One command. No signup. Runs locally.