Skip to main content

argus-orchestrator

The red-team engine of Argus, black-box red-team testing for AI agents. argus-probe run --local runs this package in-process. It contains:

  • the probe library: 205 probe YAML files mapped to OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF and the EU AI Act
  • target adapters for openai_compat, anthropic_native, custom_http, grpc, browser_use, payment_agent, mcp_agent, testbed_agent and http_upload agents
  • the judge, which scores each probe response against a rubric with an LLM

Most users want the CLI rather than this package:

pipx install "argus-probe[local]"

The import package is orchestrator.redteam. The FastAPI service in the repo's orchestrator/ directory is not part of this wheel.

Judge configuration

The judge reads these environment variables:

  • ANTHROPIC_API_KEY: used by the default provider (Anthropic).
  • OPENAI_API_KEY: used automatically when it is the only key set.
  • REDTEAM_MODEL_PROVIDER=litellm: runs the judge on a local or other model. Set REDTEAM_FAST_MODEL (for example ollama/qwen2.5:32b) and, for a non-default host, REDTEAM_LLM_API_BASE. Small models miss many jailbreaks, so a clean report from one is weak evidence. Local models other than Ollama (vLLM or LM Studio via openai/... with REDTEAM_LLM_API_BASE) are billed at the most expensive known rate, so pass --per-run-cap.
  • REDTEAM_MODEL_PROVIDER=azure: runs the judge on Azure OpenAI through litellm instead. Set AZURE_API_KEY, AZURE_API_BASE and AZURE_API_VERSION. The default deployment name is gpt-5.4-mini.
  • REDTEAM_FAST_MODEL, REDTEAM_STRONG_MODEL: optional model overrides for the two judge roles.

Azure's default content filter blocks judge calls because the judge reads attack text, so use a custom filter policy with jailbreak detection turned off for that deployment. If OPENAI_API_KEY is paired with REDTEAM_LLM_API_BASE pointing at Azure, set REDTEAM_FAST_MODEL and REDTEAM_STRONG_MODEL to your deployment names, because the default strong model gpt-5.6-terra is usually not deployed.

License: Apache-2.0. Source and docs: https://github.com/gy15901580825/Argus

Metadata

Release files for argus-orchestrator 0.3.4

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for argus-orchestrator 0.3.4
File Size Uploaded Provenance Actions
argus_orchestrator-0.3.4.tar.gz 408.3 kB With provenance Details for argus_orchestrator-0.3.4.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for argus-orchestrator 0.3.4
File Interpreter ABI Platform Actions
argus_orchestrator-0.3.4-py3-none-any.whl Python 3 none any Details for argus_orchestrator-0.3.4-py3-none-any.whl

Total release size: 826.4 kB

Release files / argus_orchestrator-0.3.4.tar.gz

Download URL argus_orchestrator-0.3.4.tar.gz
Size 408.3 kB
Tags Source
SHA-256 checksum
How to use checksums
d7fb3f2feaeff0a0c1a153867b3312fc83ccfc4525c387fddd2b5d199d47685c
BLAKE2b-256 checksum
How to use checksums
26a1665b77104e4b35d3f1cdb873919779114018da7c540357c76d2c6aae39c5
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.

Transparency log

Release files / argus_orchestrator-0.3.4-py3-none-any.whl

Download URL argus_orchestrator-0.3.4-py3-none-any.whl
Size 418.1 kB
Tags Python 3
SHA-256 checksum
How to use checksums
adca294c49593ee567e3b66001b0b14b2bdf8ccc9a0a5e5b202207df7b8f7cea
BLAKE2b-256 checksum
How to use checksums
e93dd58ab6f7786bcfbf08780b59836ce87f0dec315b0a912fe6aebc5a567311
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.

Transparency log

Security for argus-orchestrator 0.3.4

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for argus_orchestrator-0.3.4.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page