hackmyagent

opena2a-org

Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.

Summary

HackMyAgent is a TypeScript security scanner and red-team toolkit for AI agents, part of the OpenA2A ecosystem. It runs 209 static checks, 29 semantic analyses via NanoMind AST, and 164 adversarial payloads to detect credentials, prompt injection, MCP misconfigs, and agent vulnerabilities. Marked stable at v0.23.5 with 32 commits in the last month and 27 open todos, mostly release and documentation tasks.

Last commit

1mo ago

Branch

main

Language

TypeScript

Stars

Commits (30d)

Open issues

Open PRs

Working tree

clean

Linked todos (0)

No todos linked to this repo.

Recent commits

fix(scanner): handle async EPIPE on git check-ignore/ls-files stdin (#264)

1mo ago

release: 0.25.0 — bump @opena2a/aim-sdk to 1.0.2 (atx-verify 0.3.0), stamp changelog (#263)

1mo ago

chore: point published contact email to info@opena2a.org (#258)

1mo ago

fix(scan-soul): direction-aware governance scoring + prose-hardened constraint extraction (#251) (#257)

1mo ago

Stop treating security-taxonomy documents as credential access (AST-CRED-002/003) (#256)

1mo ago

Merge pull request #255 from opena2a-org/fix/git002-existence-aware

1mo ago

harden(scanner): conservative git-error direction + explicit bounds guards (#250)

1mo ago

harden(scanner): bound .pem reads, confine to scan root, authoritative node_modules backstop (#250)

1mo ago

harden(scanner): defensive input handling around git check-ignore (#250)

1mo ago

fix(scanner): probe every sensitive type for node_modules completeness (#250)

1mo ago

fix(scanner): use git check-ignore for authoritative committability (#250)

1mo ago

fix(scanner): close second-review gaps — CRED-002 completeness, GIT-003 substring, gitignore semantics (#250)

1mo ago

fix(scanner): close adversarial-review gaps in the #250 git-hygiene fix

1mo ago

fix(scanner): existence-aware GIT-001/GIT-002 severity, surface CRED-002/PERM-001, scan secrets.json (#250)

1mo ago

Merge pull request #254 from opena2a-org/release/0.24.0-arp-shim

1mo ago

refactor(arp): make ./arp a thin re-export of @opena2a/aim-sdk/arp (#249)

1mo ago

chore(release): hackmyagent 0.24.0 — ship arp shim, pin aim-sdk 1.0.1, security dep bumps

1mo ago

feat(telemetry): add `arp telemetry register` sensor enrollment (#248)

1mo ago

feat(arp): G6 — wire opt-out to registry right-to-delete purge (#247)

1mo ago

feat(arp): structural signature telemetry producer (default-on, opt-out) (#246)

1mo ago

docs(detect): clarify that machine-wide discovery always runs (#245)

1mo ago

chore(release): hackmyagent 0.23.11

1mo ago

docs(changelog): cut 0.23.11 release section

1mo ago

fix(scanner): MEM-006 no longer FPs on local render-array push (#244)

1mo ago

fix(scanner): make GIT-003 .env severity content-aware (#242) (#243)

1mo ago