agentic-semgrep-rules good first issues (Python)

Autofix for `yaml-unsafe-load` 20 days ago

help wanted good first issue hacktoberfest

0

Semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, user input in system prompts, over-broad tools, MCP servers without auth, leaked keys and unsafe model loading. 36 tested rules, CWE and OWASP mapping. Part of Masoon.

Python

#agent-security#agentic-ai#ai-agents#ai-security#code-scanning#devsecops#github-actions#hacktoberfest#llm-security#masoon#mcp#owasp#prompt-injection#sast#security-automation#security-tools#semgrep#semgrep-rules#ssrf#static-analysis

ESM and CommonJS fixtures for `llm-output-to-child-process` 20 days ago

help wanted good first issue hacktoberfest

basitalisandhu/agentic-semgrep-rules

0

Semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, user input in system prompts, over-broad tools, MCP servers without auth, leaked keys and unsafe model loading. 36 tested rules, CWE and OWASP mapping. Part of Masoon.

Python

#agent-security#agentic-ai#ai-agents#ai-security#code-scanning#devsecops#github-actions#hacktoberfest#llm-security#masoon#mcp#owasp#prompt-injection#sast#security-automation#security-tools#semgrep#semgrep-rules#ssrf#static-analysis

Enforce the `metadata.masoon` block in the metadata lint 21 days ago

help wanted good first issue hacktoberfest

basitalisandhu/agentic-semgrep-rules

0

Semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, user input in system prompts, over-broad tools, MCP servers without auth, leaked keys and unsafe model loading. 36 tested rules, CWE and OWASP mapping. Part of Masoon.

Python

#agent-security#agentic-ai#ai-agents#ai-security#code-scanning#devsecops#github-actions#hacktoberfest#llm-security#masoon#mcp#owasp#prompt-injection#sast#security-automation#security-tools#semgrep#semgrep-rules#ssrf#static-analysis

Fixture lines for Semantic Kernel and pydantic-ai tool decorators 21 days ago

help wanted good first issue hacktoberfest

basitalisandhu/agentic-semgrep-rules

0

Semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, user input in system prompts, over-broad tools, MCP servers without auth, leaked keys and unsafe model loading. 36 tested rules, CWE and OWASP mapping. Part of Masoon.

Python

#agent-security#agentic-ai#ai-agents#ai-security#code-scanning#devsecops#github-actions#hacktoberfest#llm-security#masoon#mcp#owasp#prompt-injection#sast#security-automation#security-tools#semgrep#semgrep-rules#ssrf#static-analysis

Autofix for `torch-load-without-weights-only` 21 days ago

help wanted good first issue hacktoberfest

basitalisandhu/agentic-semgrep-rules

0

Semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, user input in system prompts, over-broad tools, MCP servers without auth, leaked keys and unsafe model loading. 36 tested rules, CWE and OWASP mapping. Part of Masoon.

Python

#agent-security#agentic-ai#ai-agents#ai-security#code-scanning#devsecops#github-actions#hacktoberfest#llm-security#masoon#mcp#owasp#prompt-injection#sast#security-automation#security-tools#semgrep#semgrep-rules#ssrf#static-analysis

basitalisandhu/agentic-semgrep-rules

Open Issues Need Help