Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do?
Global
#598 · +49 · 1d ·GitHub
Public collection of high-quality templates created by General Legal attorneys with CC0 license
#666 · +43 · 1d ·GitHub
818 production-grade cybersecurity skills · 34 security domains · 6 framework mappings · 26+ AI platforms
Open source, privacy-first web analytics. Lightweight, cookie-free Google Analytics alternative. Self-hosted or cloud.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
The enterprise world model built by DeepLethe. It is the first open substrate for knowledge engineering that learns passively and governs itself.
An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.
Database governance built for humans and agents — controlling changes and access across every major database.
#1800 · +13 · 1d ·GitHub
美股指南
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
#2297 · +9 · 1d ·GitHub
> New here? md — install in 60 seconds. This README is the full reference.
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
QuestPDF is a modern library for PDF document generation. Its fluent C# API lets you design complex layouts with clean, readable code. Create documents using a flexible, component-based approach.
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
#4983 · +2 · 1d ·GitHub
🛡️ A curated list of resources on agent skills security: attacks, defenses, frameworks, and benchmarks for securing AI agent tool use and skill ecosystems
Build reliable customer-facing AI agents with Parlant: an interaction control harness optimized for controlled, consistent, and predictable LLM interactions.
#5774 · +1 · 1d ·GitHub
The Practical Linux Hardening Guide provides a high-level overview of hardening GNU/Linux systems. It is not an official standard or handbook but it touches and uses industry standards.
#5896 · +1 · 1d ·GitHub
1. Is this action allowed? An agent with access to sendemail and querydatabase should not be able to droptable.
For stable releases, the PowerShell installer uses Scoop when it is available, adding the Entire bucket if needed. local\bin, adding that directory to your user PATH if needed.
Skills, agents and commands that give Claude the playbook for an internal Active Directory assessment: the phase order, the environment constraints that break your tooling, the telemetry each technique leaves behind, and how a finding maps to a compliance control.
A universal git-native AI agent framework. Your agent lives inside a git repo — identity, rules, memory, tools, and skills are all version-controlled files.
#7918 · +0 · 1d ·GitHub
Agent-Safe Pipeline is the reference implementation of the Execution Authority architecture: AI-agent actions execute only through an independent authorization boundary, and every authorization decision leaves a verifiable evidence record.
IMPORTANT] > Trenova is pre-release software under active development. It is not yet suitable for production use. Follow releases or join the waitlist for updates.
#8205 · +0 · 1d ·GitHub
> This is a living repo: the script and handbook expand by security direction over time. The current release ships a 3200-line interactive script + 20-chapter handbook + 4 cheatsheets. Future iterations add more depth per layer.
This project has not provided a description yet.
#8400 · +0 · 1d ·GitHub
软件著作权 Skill，自动生成软著申请表、用户手册、技术文档及代码材料，辅助完成软著登记准备。
Drift detection · MCP server · Python & TypeScript SDKs · Self-host or cloud
#8507 · +0 · 1d ·GitHub
grantdecay finds privilege that was granted and never used. It reads an entitlement export (principals, roles, and the permissions each role confers) plus an access log export covering a stated window, then reports the unused privilege surface.
> This repository contains the DATAMIMIC Community Edition (CE). MIT-licensed, Python-native, MCP-ready. > > CE is fully usable standalone for deterministic synthetic data generation and model-based pseudonymization.