ASPAI Starter Package
Security Tools

10 Security Tools for AI Agents

Protect your AI systems from prompt injection, data exfiltration, and supply chain attacks. Open-source scanners, command firewalls, and built-in hooks.

#1

Anthropic-Cybersecurity-Skills

by mukul975Free

754 structured cybersecurity skills for AI agents. Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF.

#2

Pentest Agent Suite

by H-mmerFree

Autonomous bug-bounty framework. 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, 2,047 payload lines. Across 7 IDEs.

#3

Octoscan

by synacktivFree

Static vulnerability scanner for GitHub Action workflows. Detects dangerous actions, shell script injection, and known CVEs in CI/CD.

#4

deepsafe-scan

by XiaoYiWeioFree

Deep security scanning for AI codebases. Detects vulnerabilities, hardcoded secrets, and insecure patterns.

#5

Nexus Gate

by Mephisto1122Free

Deterministic command verification firewall — 195+ tool patterns, zero dependencies. Blocks unauthorized tool calls.

#

Hetty

by dstotijnFree

HTTP toolkit for security research. Intercept, inspect, and modify HTTP traffic with a man-in-the-middle proxy and web UI.

#

GHunt

by mxrchFree

Offensive Google OSINT framework. Extract info from Google accounts — emails, names, photos, maps, calendar, YouTube. Fully async, CLI + Python library. 15K+ stars.

#

Shannon

by KeygraphHQFree

Autonomous AI pentester. White-box security testing — analyzes source code, identifies attack vectors, executes real exploits (injection, auth bypass, SSRF, XSS). Only reports with working PoC.

#6

Secret Scanner Hook

by AI Starter PackageIncluded

Pre-commit hook that blocks commits containing API keys, tokens, or credentials. Built into AI Brain Pro.

#7

Branch Protector Hook

by AI Starter PackageIncluded

Prevents accidental commits to main branch. Auto-rejects force pushes. Built into AI Brain Pro.

#8

Doom Loop Detector

by AI Starter PackageIncluded

Detects when an agent is stuck in retry loops. Escalates after 3 failures with root cause diagnosis. Built into AI Brain Pro.

#9

Dual-Gate Review Process

by AI Starter PackageIncluded

Two-step security + quality review for third-party skills and tools. Gate 1: security audit. Gate 2: quality check. Built into our methodology.

#10

OWASP Top 10 for LLMs

by OWASP FoundationFree

Security checklist for LLM applications. Prompt injection, data exfiltration, supply chain attacks, privilege escalation.

#

Cybersecurity Scan (90 Checks)

by AI Brain ProIncluded

Automated security audit across 8 domains: Secrets, Dependencies, Code (OWASP), Infrastructure, IAM, Compliance (GDPR/LGPD), Logs, Backup. 90 checks with CRITICAL/HIGH/MEDIUM/LOW classification.

Defense in depth

Security Layers in AI Brain Pro

Three layers of protection built into every AI Brain Pro installation.

P

Pre-commit

Before code ships

Catch secrets and protect branches before anything reaches production.

  • Secret scanning (API keys, tokens, credentials)
  • Branch protection (blocks direct pushes to main)
  • Automated pre-commit hooks
R

Runtime

While agents run

Monitor and control agent behavior during execution.

  • Tool verification (195+ command patterns)
  • Doom loop detection (escalates after 3 failures)
  • Context health monitoring
R

Review

Before anything is trusted

Two-gate process ensures nothing malicious enters your system.

  • Gate 1: Security audit (no exfiltration, no telemetry)
  • Gate 2: Quality check (maintained, documented, relevant)
  • Auditor agent reviews all promotions

Ship with confidence

AI Brain Pro includes secret scanning, branch protection, doom loop detection, dual-gate review, and the Nexus Gate command firewall config.