Give your AI a health check.
One scan. Thirteen engines. One report.
You found an MCP Server / Skill / Plugin online and want to install it. But you're wondering:
Is this thing safe? Will it steal my API keys? Hijack my AI? Mine crypto?
AgentShield answers that in seconds. One command, 13 independent scanning engines, one clear report.
npx @elliotllliu/agent-shield scan ./that-thing-you-want-to-installThat's it. First run auto-installs all engines. After that, results come in seconds.
🛡️ 安全检测报告
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📁 检测对象: ./mcp-puppeteer
🔧 检测引擎: 13 个独立扫描器
⏱ 总耗时: 50.2s
──────────────────────────────────────────────────────
🔍 各方检测结论
──────────────────────────────────────────────────────
📋 AgentShield — 内置参考（AI Agent 基础检查）
结论: ⚠️ 发现 1 处需关注
• 代码混淆 📍 src/index.ts:1
🔍 Aguara — 通用代码安全
结论: ✅ 未发现风险
🔎 Semgrep — 代码质量与注入检测
结论: ✅ 未发现风险
🧪 Invariant — MCP Tool Poisoning 检测
结论: ✅ 未发现风险
🔬 Trivy — 漏洞扫描 + 密钥检测
结论: ✅ 未发现风险
🔑 Gitleaks — 密钥和 Token 泄露
结论: ✅ 未发现风险
🐍 Bandit — Python 代码安全
结论: ✅ 未发现风险
📡 Bearer — 数据流 + 隐私分析
结论: ✅ 未发现风险
──────────────────────────────────────────────────────
📊 综合结论
──────────────────────────────────────────────────────
✅ 所有引擎均未检出风险
（7/7 个外部引擎未检出风险）
✅ 后门/远程控制 — 7 个引擎均未检出
✅ 数据窃取 — 7 个引擎均未检出
✅ Prompt 注入 — 7 个引擎均未检出
✅ 挖矿行为 — 7 个引擎均未检出
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
One glance: 7 out of 7 external engines say it's clean. All major threats cleared. Safe to install.
Because it's not one engine making the call. It's 13 independent scanning engines, each a specialist in their own domain. We bring them together:
| Engine | What it's best at |
|---|---|
| 📋 AgentShield (reference) | AI Agent basics — skill hijack, prompt injection, MCP runtime |
| 🔍 Aguara | General security — 177 rules, data exfil, taint tracking |
| 🔎 Semgrep | Code quality — 2000+ rules, injection, XSS, hardcoded secrets |
| 🧪 Invariant | MCP-specific — tool poisoning, cross-origin escalation, rug pull |
| 🔬 Trivy | Vulnerability scan + secret detection + SBOM |
| 🔑 Gitleaks | Secret and token leak detection |
| 🐍 Bandit | Python code security |
| 📡 Bearer | Data flow + privacy analysis |
| 🐕 TruffleHog | Secret detection + verification if active |
| 🌐 OSV-Scanner | Dependency vulnerabilities (Google OSV database) |
| 🦑 Grype | Dependency vulnerability scanning |
| 🟢 njsscan | Node.js / JavaScript security |
| 🔐 detect-secrets | Secret detection (Yelp) |
Each engine has its own strengths. We combine all of them into one report.
The built-in engine is reference-only — the overall conclusion is decided by the 7 external engines' consensus. The stronger they get, the stronger we get.
First time you run it, engines are auto-installed (to ~/.agentshield/, no sudo needed):
🔧 检查引擎...
✅ AgentShield — 已就绪
📦 Aguara — 正在安装... 完成
📦 Semgrep — 正在安装... 完成
📦 Invariant — 正在安装... 完成
📦 Trivy — 正在安装... 完成
📦 Gitleaks — 正在安装... 完成
📦 Bandit — 正在安装... 完成
📦 Bearer — 正在安装... 完成
One-time setup. After that, it's instant.
| Risk | What it means |
|---|---|
| 🔴 Skill Hijack | It's secretly modifying your AI's config |
| 🔴 Backdoor | It can silently execute arbitrary code |
| 🔴 Remote Control | It's connecting to external servers + opening a shell |
| It reads your keys/files and sends them out | |
| It's secretly adding instructions to your AI | |
| Hidden malicious instructions in tool descriptions | |
| Code is intentionally unreadable — might be hiding something | |
| Known CVEs in dependencies | |
| API keys, tokens, passwords in source code | |
| ℹ️ Excessive Permissions | It asks for more than it needs |
# HTML report (shareable)
agent-shield scan ./dir --html -o report.html
# JSON (for CI/CD)
agent-shield scan ./dir --json
# Chinese report (default)
agent-shield scan ./dir --lang zh
# SARIF (GitHub Code Scanning)
agent-shield scan ./dir --sarif -o results.sarif# Recommended: use npx, nothing to install
npx @elliotllliu/agent-shield scan ./my-skill/
# Or install globally
npm install -g @elliotllliu/agent-shield"We don't compete — we aggregate."
We bring every engine's strengths together, cross-validate their findings, and produce one unified report. The stronger each engine gets, the stronger AgentShield gets.
We're the X-ray machine, not the doctor. We show you what's inside — you decide whether to install it.
MIT