Pinned Loading

1. opena2a opena2a Public

   One scan for AI risk. opena2a review checks an AI project across credentials, shadow agents, MCP servers, and dependencies, returns a score, and routes each finding to the tool that fixes it. Open …

   TypeScript 17 5

2. hackmyagent hackmyagent Public

   Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.

   TypeScript 30 2

3. agent-identity-management agent-identity-management Public

   The IAM layer for AI agents: cryptographic identity, capability authorization, and audit trails for non-human identities. Open source.

   Go 46 14

4. ai-trust ai-trust Public

   VirusTotal for AI packages. ai-trust check <pkg> returns a 0-100 trust score from the OpenA2A Registry trust graph, covering security scans, advisories, and dependency risk. For MCP servers, A2A ag…

   TypeScript 2

5. secretless-ai secretless-ai Public

   One command to keep secrets out of AI (LLMs). Works with Claude Code, Cursor, Copilot, Windsurf, and any AI coding tool.

   TypeScript 19 4

6. nanomind nanomind Public

   On-device models that detect and classify AI agent attacks. A 2M-param classifier (<1ms, offline) and a 1.7B-param analyst, shipping inside HackMyAgent, Secretless, and the OpenA2A CLI.

   TypeScript 2