Awesome AI Security Tools
A curated list of public-source, research, and commercial tools for AI security and AI-assisted cybersecurity — autotriage, agent security, AI/ML supply chain, pentest agents, AI SAST, LLM-driven fuzzing, threat intelligence, SOC/SIEM triage, reverse engineering, LLM red-teaming, and more.
Install / Use
npx skills add scadastrangelove/awesome-ai-security-toolsInstalls into whichever agent you are using.
README
Awesome AI Security Tools 
A curated list of public-source, research, and commercial tools for AI security and AI-assisted cybersecurity — autotriage, agent security, AI/ML supply chain, pentest agents, AI SAST, LLM-driven fuzzing, threat intelligence, SOC/SIEM triage, reverse engineering, LLM red-teaming, and more.
Type legend: 🟢 public source / open-source · 🔬 research (paper / benchmark / dataset / framework) · 🟠 commercial with open components · ⚠️ restrictive, non-commercial, or unclear/no license — check before use.
GitHub-hosted entries show static ★ stars and last-commit snapshots; refresh them with python3 scripts/update_github_metrics.py before release. Latest snapshot: 2026-08-06. Hugging Face model entries show license, access, and artifact metadata. Ordering within a section favors flagship and actively maintained projects.
Contents
- Autotriage of Security Findings
- AI Agent & Coding-Agent Security
- AI/ML Supply Chain & Model Security
- Pentest & Red-Team Agents
- AI-Powered Recon & Narrow ML Tools
- AI-Powered SAST & Secure Code Review
- LLM-Driven Fuzzing
- Threat Intelligence
- Log Analysis / SIEM / SOC Triage
- Reverse Engineering
- LLM Red-Teaming & Guardrails
- LLM Honeypots & Deception
- CTF / Exploit / Bug-Bounty Agents & Benchmarks
- Cloud / IaC / DFIR / OSINT / Phishing
- Related Awesome Lists
- Contributing
- Contact
- License
Autotriage of Security Findings
AI/LLM tools that triage, deduplicate, prioritize, or validate the output of scanners and finding sources.
- nuclei-autotriage 🟢⚠️ — Two-stage LLM triage (falsifier + red-team pass) of Nuclei JSONL findings via OpenAI-compatible endpoints (vLLM/Ollama). (CyberOK) — note: restrictive personal/non-commercial EULA, not a permissive OSS license. (★ 1 · updated 2026-05-25)
- Related: agent-audit · asamm
- seclab-taskflow-agent 🟢 — YAML-driven taskflow agent framework for triaging CodeQL/SAST alerts and filtering false positives. (GitHub Security Lab) (★ 220 · updated 2026-08-03)
- Related: SigmaOptimizer
- honeyslop 🟢 — Code-canary decoys to triage AI-hallucinated ("slop") vulnerability reports flooding bug-bounty programs. (★ 96 · updated 2026-05-20)
- nano-analyzer 🟢🔬 — Minimal three-stage LLM pipeline (context → scan → skeptical triage) for zero-day discovery in C/C++. (AISLE) (★ 303 · updated 2026-04-14)
- SigmaOptimizer 🟢 — Generates, tests, and refines Sigma rules from real logs with false-positive checking. (★ 11 · updated 2025-08-01)
- Related: soctalk · seclab-taskflow-agent
- ai-soc-triage-assistant 🟢⚠️ — SOC alert triage assistant with prompt-injection guardrails, output validation, and MITRE ATT&CK mapping. (★ 0 · updated 2026-02-23)
See also: OpenAI's Aardvark research preview — public references exist, but there is no standalone installable repository to badge here.
AI Agent & Coding-Agent Security
Securing the AI agents themselves — auditing coding agents (Claude Code, Codex, OpenClaw), scanning skills / plugins / MCP manifests, and governance for agentic development. A fast-moving 2026 category, split below by role.
Scanners & Auditors
- agent-audit 🟢 — Forensic auditor for local AI coding agents (Claude Code, Codex CLI, OpenClaw) and project-surface scanner for repos shipping skills, plugins, and MCP manifests; 296 bundled rules across native + imported detector families, with optional LLM cross-verification. (CyberOK / S. Gordeychik) (★ 15 · updated 2026-07-15)
- Sources: asamm · ATR – Agent Threat Rules · aguara · Cisco AI Defense – skill-scanner
- Related: asamm · aguara · agentguard · agentic-radar · nuclei-autotriage
- AI-Infra-Guard 🟢 — Full-stack AI red-teaming platform covering OpenClaw security scan, agent scan, skills scan, MCP scan, AI-infra vulnerability scan, and LLM jailbreak evaluation. (Tencent Zhuque Lab) (★ 4,413 · updated 2026-08-05)
- SkillSpector 🟢 — Security scanner for AI-agent skills used by Claude Code, Codex CLI, Gemini CLI, and similar ecosystems; combines static analysis, AST/YARA/taint checks, optional LLM semantic review, MCP least-privilege/tool-poisoning checks, risk scoring, and SARIF/JSON/Markdown output. (NVIDIA) (★ 14,284 · updated 2026-08-05)
- Ramparts 🟢 — Rust scanner for MCP servers and agent-skill bundles with YARA rules, optional LLM analysis, OSV/CVE lookups, OWASP MCP Top 10 mapping, and SARIF/JSON/Markdown reports. (★ 95 · updated 2026-07-29)
- mcp-armor 🟢 — Local MCP security scanner with auto-discovery for agentic IDE configs, tool/resource/prompt inventory, prompt-injection checks, rug-pull and tool-poisoning detection, baseline drift monitoring, and JSON/Markdown reports. (Aira Security) (★ 117 · updated 2026-03-27)
- Related: SkillSpector · Ramparts · Cisco AI Defense – mcp-scanner
- aguara 🟢 — Single-binary static scanner (Go, no LLM) for AI-agent skills and MCP servers; multi-layer engine (pattern + NLP + taint tracking + rug-pull detection). Companion aguara-mcp exposes scanning as an MCP tool. (★ 85 · updated 2026-07-24)
- Related: aguara-mcp · agent-audit · Snyk Agent Scan · Cisco AI Defense – skill-scanner
- agent-scan 🟢 — Security scanner for AI agents, MCP servers, and agent skills; the successor path for the original Invariant Labs mcp-scan work. (Snyk) (★ 2,878 · updated 2026-08-06)
- Related: aguara · Cisco AI Defense – mcp-scanner · [Cisco AI Defense – skill-scanner
Related Skills
healthcheck
385.5kAudit/harden OpenClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security.
python-debugpy
385.5kDebug Python with pdb, breakpoint(), post-mortem inspection, and debugpy remote attach.
prose
385.5kOpenProse VM skill pack. Activate on any `prose` command, .prose files, or OpenProse mentions; orchestrates multi-agent workflows.
Writing Hookify Rules
140.6kThis skill should be used when the user asks to "create a hookify rule", "write a hook rule", "configure hookify", "add a hookify rule", or needs guidance on hookify rule syntax and patterns.
