SafeAI: An Open-Source Static Analyzer for AI Agent Risks and Capabilities
IkarusCareer · reddit · 2026-08-01
A developer introduced SafeAI, an Apache-2.0 licensed static analyzer designed to help teams quickly assess AI agent risks and capabilities before merging or deployment.
Featuring a local-first KYA (Know Your Agent) workflow, the tool generates a versioned safeai-manifest.json artifact. It statically extracts declared capabilities, bound tools, MCP configurations, secrets, and governance signals. It also supports baseline comparisons and CI gating via --fail-on-new.
The author emphasizes that SafeAI strictly provides static source/configuration evidence. It does not run agents, call LLMs, or upload source code, making it a safe and lightweight addition to development pipelines.
Related event: SafeAI Launches: Open-Source Static Scanner for AI Agents(2 posts)→
More from coding & agent
- DeepMind turns coding agent Antigravity into a science tool, surfacing novel antimicrobial peptide in one session — pushmeet · 2026-10-16
- Cross-review coding workflow: Claude writes the plan, Codex audits it — theteknosaur · 2026-10-16
- Simon Willison: code mode is the future of tool calling, if it can be sandboxed — springrod · 2026-10-16
- Normalizing Claude's schema-free MCP output before it hits downstream n8n nodes — snowingbol · 2026-10-16
- Agent named 'Ilya' reportedly scores 1.1pt higher on benchmarks — daniel_mac8 · 2026-10-16
- A plain notes.md fixed my agent's cross-session amnesia better than chat history — rahul_watertech · 2026-10-16