basitalisandhu

basitalisandhu/agent-config-audit

Audit AI agent configuration files for security risks: risky permissions in .claude settings, secrets and unpinned servers in .mcp.json and claude_desktop_config.json, exfiltrating hooks, and prompt-injection patterns in CLAUDE.md, AGENTS.md and .cursor rules. Table, JSON and SARIF output, allowlist, GitHub Action, pre-commit.

7 good first / help-wanted issues · Python · last activity Oct 4, 2026

0 stars 0 forks 0 watchers Python MIT License
agent-security ai-agents ai-security claude-code cli configuration-audit cursor devsecops github-actions hacktoberfest llm-security mcp pre-commit prompt-injection python sarif secrets-detection security-automation security-tools
View on GitHub
7 Open Issues Need Help Last updated: Oct 4, 2026

Open Issues Need Help

View All on GitHub
`--baseline` mode for pull requests 5 days ago
help wanted good first issue hacktoberfest
basitalisandhu/agent-config-audit
0

Audit AI agent configuration files for security risks: risky permissions in .claude settings, secrets and unpinned servers in .mcp.json and claude_desktop_config.json, exfiltrating hooks, and prompt-injection patterns in CLAUDE.md, AGENTS.md and .cursor rules. Table, JSON and SARIF output, allowlist, GitHub Action, pre-commit.

Python
#agent-security#ai-agents#ai-security#claude-code#cli#configuration-audit#cursor#devsecops#github-actions#hacktoberfest#llm-security#mcp#pre-commit#prompt-injection#python#sarif#secrets-detection#security-automation#security-tools
Windsurf and Cline permission settings 7 days ago
help wanted good first issue hacktoberfest
basitalisandhu/agent-config-audit
0

Audit AI agent configuration files for security risks: risky permissions in .claude settings, secrets and unpinned servers in .mcp.json and claude_desktop_config.json, exfiltrating hooks, and prompt-injection patterns in CLAUDE.md, AGENTS.md and .cursor rules. Table, JSON and SARIF output, allowlist, GitHub Action, pre-commit.

Python
#agent-security#ai-agents#ai-security#claude-code#cli#configuration-audit#cursor#devsecops#github-actions#hacktoberfest#llm-security#mcp#pre-commit#prompt-injection#python#sarif#secrets-detection#security-automation#security-tools
Issue form for false positives 7 days ago
help wanted good first issue hacktoberfest
basitalisandhu/agent-config-audit
0

Audit AI agent configuration files for security risks: risky permissions in .claude settings, secrets and unpinned servers in .mcp.json and claude_desktop_config.json, exfiltrating hooks, and prompt-injection patterns in CLAUDE.md, AGENTS.md and .cursor rules. Table, JSON and SARIF output, allowlist, GitHub Action, pre-commit.

Python
#agent-security#ai-agents#ai-security#claude-code#cli#configuration-audit#cursor#devsecops#github-actions#hacktoberfest#llm-security#mcp#pre-commit#prompt-injection#python#sarif#secrets-detection#security-automation#security-tools
Add rule help text to the SARIF output 9 days ago
help wanted good first issue hacktoberfest
basitalisandhu/agent-config-audit
0

Audit AI agent configuration files for security risks: risky permissions in .claude settings, secrets and unpinned servers in .mcp.json and claude_desktop_config.json, exfiltrating hooks, and prompt-injection patterns in CLAUDE.md, AGENTS.md and .cursor rules. Table, JSON and SARIF output, allowlist, GitHub Action, pre-commit.

Python
#agent-security#ai-agents#ai-security#claude-code#cli#configuration-audit#cursor#devsecops#github-actions#hacktoberfest#llm-security#mcp#pre-commit#prompt-injection#python#sarif#secrets-detection#security-automation#security-tools
Report `Read(./.env)` style secrets exposure in allow rules 20 days ago
help wanted good first issue hacktoberfest
basitalisandhu/agent-config-audit
0

Audit AI agent configuration files for security risks: risky permissions in .claude settings, secrets and unpinned servers in .mcp.json and claude_desktop_config.json, exfiltrating hooks, and prompt-injection patterns in CLAUDE.md, AGENTS.md and .cursor rules. Table, JSON and SARIF output, allowlist, GitHub Action, pre-commit.

Python
#agent-security#ai-agents#ai-security#claude-code#cli#configuration-audit#cursor#devsecops#github-actions#hacktoberfest#llm-security#mcp#pre-commit#prompt-injection#python#sarif#secrets-detection#security-automation#security-tools
Generate `docs/checks.md` from `rules.py` 21 days ago
help wanted good first issue hacktoberfest
basitalisandhu/agent-config-audit
0

Audit AI agent configuration files for security risks: risky permissions in .claude settings, secrets and unpinned servers in .mcp.json and claude_desktop_config.json, exfiltrating hooks, and prompt-injection patterns in CLAUDE.md, AGENTS.md and .cursor rules. Table, JSON and SARIF output, allowlist, GitHub Action, pre-commit.

Python
#agent-security#ai-agents#ai-security#claude-code#cli#configuration-audit#cursor#devsecops#github-actions#hacktoberfest#llm-security#mcp#pre-commit#prompt-injection#python#sarif#secrets-detection#security-automation#security-tools
Follow `@path` includes in instruction files 21 days ago
help wanted good first issue hacktoberfest
basitalisandhu/agent-config-audit
0

Audit AI agent configuration files for security risks: risky permissions in .claude settings, secrets and unpinned servers in .mcp.json and claude_desktop_config.json, exfiltrating hooks, and prompt-injection patterns in CLAUDE.md, AGENTS.md and .cursor rules. Table, JSON and SARIF output, allowlist, GitHub Action, pre-commit.

Python
#agent-security#ai-agents#ai-security#claude-code#cli#configuration-audit#cursor#devsecops#github-actions#hacktoberfest#llm-security#mcp#pre-commit#prompt-injection#python#sarif#secrets-detection#security-automation#security-tools