1. Conduid
  2. Security
  3. Mylonite
MCP server · Security

Mylonite

by · github.com/Abidemialade/mylonite

Open-source AI-layer security testing — probes your AI agent for weaknesses and writes a validated regression test for each one it finds, gating CI.

Unclaimed agent-securityai-securityllm-securitymcpowaspprompt-injectionpytestpythonred-teamingsecurity-testing
InstallView source
34Low

Scored a month ago · breakdown

About Mylonite

Mylonite is an MCP server published by Abidemialade in the Security category: open-source AI-layer security testing — probes your AI agent for weaknesses and writes a validated regression test for each one it finds, gating CI.

The repository has 1 stars and 0 forks, with the last commit 7 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/Abidemialade/mylonite

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Mylonite

Powered by Claude · Grounded in docs

I know everything about Mylonite. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.12.1v0.12.1 · 10 Oct 2026Fixed The LLM judge no longer counts a string `"false"` as a landed attack.** It read `success` with Python's `bool()`, and `bool("false")` is true, so a judge that answered `"success": "false"` produced a finding. `success` and…
v0.12.0v0.12.0 · 6 Oct 2026Fixed The scaffolded nightly discovery workflow no longer leaves a write-capable credential sitting in `.git/config` while your target runs.** `mylonite-discovery.yml`'s checkout kept `actions/checkout`'s default persisted credential…
v0.11.0v0.11.0 · 2 Oct 2026This release makes every result say what proved it, and stops reporting what was never proven. An LLM-judge "success" that the agent's own tool calls contradict is no longer a finding. Every finding is labelled `state`, `trace` or…
v0.10.5v0.10.5 · 1 Oct 2026This release closes the false clean on MCP targets set up the way the docs describe. The agent's own tool-call trace now decides what an attempt did. An effect check's "no change" counts only after calibration has proved it sees a known…
v0.10.4v0.10.4 · 28 Sep 2026This release makes `scan` and `validate` trustworthy on MCP servers that keep state between runs, such as files, databases, memory stores and remote servers. An effect now counts only for the attempt that caused it. A guarded run can no…
Questions

About Mylonite

How do I install Mylonite?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Mylonite safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Mylonite still maintained?

Yes — the latest release is v0.12.1 (10 Oct 2026), and the last commit was 7 days ago. The repository has 1 stars.