1. Conduid
  2. Security
  3. Agent Config Audit
MCP server · Security

Agent Config Audit

by · github.com/basitalisandhu/agent-config-audit

Audit AI agent configuration for security risks: risky Claude Code permission rules and rules it silently skips, secrets and unpinned MCP servers in .mcp.json, exfiltrating hooks, plugin manifests, and prompt injection in CLAUDE.md, its @imports, AGENTS.md and .cursor rules. Table, JSON, Markdown and SARIF; GitHub Action, pre-commit.

Unclaimed agent-securityai-agentsai-securityclaude-codeclaude-mdcliconfiguration-auditcursordevsecopsgithub-actionshacktoberfestllm-securitymcppre-commitprompt-injectionpythonsarifsecrets-detectionsecurity-automationsecurity-tools
InstallView source
34Low

Scored 9 hours ago · breakdown

About Agent Config Audit

Agent Config Audit is an MCP server published by basitalisandhu in the Security category: audit AI agent configuration for security risks: risky Claude Code permission rules and rules it silently skips, secrets and unpinned MCP servers in .mcp.json, exfiltrating hooks, plugin manifests, and prompt injection in CLAUDE.md, its @imports, AGENTS.md and .cursor rules. Table, JSON, Markdown and SARIF; GitHub Action, pre-commit.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/basitalisandhu/agent-config-audit

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Agent Config Audit

Powered by Claude · Grounded in docs

I know everything about Agent Config Audit. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Agent Config Audit

How do I install Agent Config Audit?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Agent Config Audit safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Agent Config Audit still maintained?

Yes — the last commit was 5 days ago. The repository has 0 stars and 3 forks.