Skip to main content

Security scanner for CrewAI multi-agent workflows — powered by AgentSentinel on SingularityNET

Project description

agentsentinel-crewai

Security scanner for CrewAI multi-agent workflows.
Powered by AgentSentinel on SingularityNET mainnet.

Detects 8 attack categories before your agents run:

  • Agent Impersonation & Identity Spoofing
  • Tool Call Hijacking (shell, exec, eval tools)
  • Memory Poisoning
  • Orchestrator Manipulation
  • Privilege Escalation via Agent Chaining
  • Goal Hijacking / Objective Corruption
  • Inter-Agent Communication Injection
  • Infinite Loop / Resource Exhaustion

Install

pip install agentsentinel-crewai

Quick Start

from crewai import Agent, Task, Crew
from agentsentinel_crewai import scan_crew, SecurityAudit, secure_crew

# Build your crew as normal
researcher = Agent(
    role="Researcher",
    goal="Research topics",
    backstory="Expert researcher",
    allow_delegation=True,
    tools=["web_search", "read_file"]
)

crew = Crew(agents=[researcher], tasks=[...])

# Option 1 — scan and print report
report = scan_crew(crew)
report.print()

# Option 2 — raise SecurityError on CRITICAL findings
SecurityAudit(crew, block_on="CRITICAL").scan()

# Option 3 — decorator on your crew factory
@secure_crew(block_on="CRITICAL")
def build_research_crew():
    return Crew(agents=[...], tasks=[...])

crew = build_research_crew()  # raises SecurityError if CRITICAL issues found

Configuration

# Custom AgentSentinel endpoint (default: localhost:7009)
report = scan_crew(crew, endpoint="your-server:7009")

# Or via environment variable
import os
os.environ["AGENTSENTINEL_ENDPOINT"] = "your-server:7009"

Using the SingularityNET hosted service:
Pay per scan in ASI tokens at 0.005 ASI/scan via the marketplace.
AgentSentinel on SingularityNET


Report Output

AgentSentinel Security Report — CrewAI
============================================================
  Risk Level : CRITICAL
  Risk Score : 75/100
  Findings   : 4
  Duration   : 12ms
  Framework  : crewai

  Findings:
  [CRITICAL] AGT02 — Shell execution tool detected
             Agent: AdminAgent
             Fix: Whitelist allowed tool calls. Never allow shell/exec tools without human approval.
  [HIGH    ] AGT05 — Unrestricted delegation enabled
             Fix: Implement least-privilege per agent role.
  [HIGH    ] AGT08 — No iteration limit — infinite loop risk
             Fix: Set explicit timeouts and iteration limits.
  [MEDIUM  ] AGT01 — Verbose mode exposes agent internals
             Fix: Disable verbose in production.
============================================================

CI/CD Integration

# GitHub Actions example
- name: Security scan CrewAI workflow
  run: |
    pip install agentsentinel-crewai
    python -c "
    from agentsentinel_crewai import scan_crew
    from your_module import build_crew
    report = scan_crew(build_crew())
    if report.risk_level == 'CRITICAL':
        exit(1)
    "

Links


MIT License — © 2026 NeuralSentinel

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

agentsentinel_crewai-0.1.0.tar.gz (7.9 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

agentsentinel_crewai-0.1.0-py3-none-any.whl (7.7 kB view details)

Uploaded Python 3

File details

Details for the file agentsentinel_crewai-0.1.0.tar.gz.

File metadata

  • Download URL: agentsentinel_crewai-0.1.0.tar.gz
  • Upload date:
  • Size: 7.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.13.12

File hashes

Hashes for agentsentinel_crewai-0.1.0.tar.gz
Algorithm Hash digest
SHA256 99fda7a23ae49d04f0b25cb20536bbc92a661da8cfddc91d77cf151c2650da3e
MD5 30351791ec05766c22b331f3b7351046
BLAKE2b-256 3b088fb19be4b25eb1d85a853029f1e6c80daf18b4b39dd837418bf748fa4dd1

See more details on using hashes here.

File details

Details for the file agentsentinel_crewai-0.1.0-py3-none-any.whl.

File metadata

File hashes

Hashes for agentsentinel_crewai-0.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 f20783d805eabe1c7295a8a7ddaa14aca0c67e18d36a442daa522fae776044a7
MD5 14ad529aa910b4cb4dba353b10d89edf
BLAKE2b-256 c61560308751a3ee84eab5b0189a0a9a4402b44122c15b94e6b6b45ebd7e60b6

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page