agent-bom open-source scanner maps MCP security findings into investigation graphs
OkKaleidoscope4462 · reddit · 2026-10-13
The maintainer of agent-bom, an open-source security scanner and self-hosted control plane for AI, MCP and cloud infrastructure, is seeking feedback from MCP server operators. It discovers agents, tools, servers and packages across Claude, Cursor, Copilot and Windsurf plus AWS, Azure, GCP and Kubernetes, and maps findings into an investigation graph to guide triage. Local CLI scans need no account; the author wants reports of setup failures, wrong agent/tool relationships, missing provenance and overclaimed reachability.
More from coding & agent
- Humanizer, 56k stars: strips AI-writing tells using Wikipedia's checklist — sujingshen · 2026-10-13
- React dev poteto: writing is thinking, so I never let agents write for me — andfanilo · 2026-10-13
- Production AI evaluation: latency, token cost, throughput and failure rates — goyalshaliniuk · 2026-10-13
- Evaluate AI by task outcomes, not explanations: multi-step completion metrics — goyalshaliniuk · 2026-10-13
- 7 types of AI evaluations every engineer should run, from functional to regression — goyalshaliniuk · 2026-10-13
- Claude Opus agents dig up buried public LIDAR data to model USS Nimitz to near-exact dimensions — teortaxesTex · 2026-10-13