Skip to main content

argus-orchestrator

The red-team engine of Argus, black-box red-team testing for AI agents. argus-probe run --local runs this package in-process. It contains:

  • the probe library: 205 probe YAML files mapped to OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF and the EU AI Act
  • target adapters for openai_compat, anthropic_native, custom_http, grpc, browser_use, payment_agent, mcp_agent, testbed_agent and http_upload agents
  • the judge, which scores each probe response against a rubric with an LLM

Most users want the CLI rather than this package:

pipx install "argus-probe[local]"

The import package is orchestrator.redteam. The FastAPI service in the repo's orchestrator/ directory is not part of this wheel.

Judge configuration

The judge reads these environment variables:

  • ANTHROPIC_API_KEY: used by the default provider (Anthropic).
  • OPENAI_API_KEY: used automatically when it is the only key set.
  • REDTEAM_MODEL_PROVIDER=litellm: runs the judge on a local or other model. Set REDTEAM_FAST_MODEL (for example ollama/qwen2.5:32b) and, for a non-default host, REDTEAM_LLM_API_BASE. Small models miss many jailbreaks, so a clean report from one is weak evidence. Local models other than Ollama (vLLM or LM Studio via openai/... with REDTEAM_LLM_API_BASE) are billed at the most expensive known rate, so pass --per-run-cap.
  • REDTEAM_MODEL_PROVIDER=azure: runs the judge on Azure OpenAI through litellm instead. Set AZURE_API_KEY, AZURE_API_BASE and AZURE_API_VERSION. The default deployment name is gpt-5.4-mini.
  • REDTEAM_FAST_MODEL, REDTEAM_STRONG_MODEL: optional model overrides for the two judge roles.

Azure's default content filter blocks judge calls because the judge reads attack text, so use a custom filter policy with jailbreak detection turned off for that deployment. If OPENAI_API_KEY is paired with REDTEAM_LLM_API_BASE pointing at Azure, set REDTEAM_FAST_MODEL and REDTEAM_STRONG_MODEL to your deployment names, because the default strong model gpt-5.6-terra is usually not deployed.

License: Apache-2.0. Source and docs: https://github.com/gy15901580825/Argus

Metadata

Release files for argus-orchestrator 0.3.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for argus-orchestrator 0.3.2
File Size Uploaded Provenance Actions
argus_orchestrator-0.3.2.tar.gz 240.9 kB With provenance Details for argus_orchestrator-0.3.2.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for argus-orchestrator 0.3.2
File Interpreter ABI Platform Actions
argus_orchestrator-0.3.2-py3-none-any.whl Python 3 none any Details for argus_orchestrator-0.3.2-py3-none-any.whl

Total release size: 544.1 kB

Release files / argus_orchestrator-0.3.2.tar.gz

Download URL argus_orchestrator-0.3.2.tar.gz
Size 240.9 kB
Tags Source
SHA-256 checksum
How to use checksums
e609c89cd63b707d8874b336d3faaccd09dcf385522f4578d06f05e22d1bcd4c
BLAKE2b-256 checksum
How to use checksums
d2714d14ce2b3b5ceee83f9bc92ad0b40943a6151c76001634a9df0d3ba538ae
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 26, 2026.

Transparency log

Release files / argus_orchestrator-0.3.2-py3-none-any.whl

Download URL argus_orchestrator-0.3.2-py3-none-any.whl
Size 303.2 kB
Tags Python 3
SHA-256 checksum
How to use checksums
ee9a3068ece65f9474dda7bc9089aefb3f9ab68560490977b219e6871f6f8dde
BLAKE2b-256 checksum
How to use checksums
3b5a0d1b14ca02b113a419df39d183f6ebecd370b6b2fcb07ba51628432a150e
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 26, 2026.

Transparency log

Security for argus-orchestrator 0.3.2

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for argus_orchestrator-0.3.2.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 26, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page