argus-orchestrator
The red-team engine of Argus, black-box red-team testing for AI agents. argus-probe run --local runs this package in-process. It contains:
- the probe library: 205 probe YAML files mapped to OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF and the EU AI Act
- target adapters for
openai_compat,anthropic_native,custom_http,grpc,browser_use,payment_agent,mcp_agent,testbed_agentandhttp_uploadagents - the judge, which scores each probe response against a rubric with an LLM
Most users want the CLI rather than this package:
pipx install "argus-probe[local]"
The import package is orchestrator.redteam. The FastAPI service in the repo's orchestrator/ directory is not part of this wheel.
Judge configuration
The judge reads these environment variables:
ANTHROPIC_API_KEY: used by the default provider (Anthropic).OPENAI_API_KEY: used automatically when it is the only key set.REDTEAM_MODEL_PROVIDER=litellm: runs the judge on a local or other model. SetREDTEAM_FAST_MODEL(for exampleollama/qwen2.5:32b) and, for a non-default host,REDTEAM_LLM_API_BASE. Small models miss many jailbreaks, so a clean report from one is weak evidence. Local models other than Ollama (vLLM or LM Studio viaopenai/...withREDTEAM_LLM_API_BASE) are billed at the most expensive known rate, so pass--per-run-cap.REDTEAM_MODEL_PROVIDER=azure: runs the judge on Azure OpenAI through litellm instead. SetAZURE_API_KEY,AZURE_API_BASEandAZURE_API_VERSION. The default deployment name isgpt-5.4-mini.REDTEAM_FAST_MODEL,REDTEAM_STRONG_MODEL: optional model overrides for the two judge roles.
Azure's default content filter blocks judge calls because the judge reads attack text, so use a custom filter policy with jailbreak detection turned off for that deployment. If OPENAI_API_KEY is paired with REDTEAM_LLM_API_BASE pointing at Azure, set REDTEAM_FAST_MODEL and REDTEAM_STRONG_MODEL to your deployment names, because the default strong model gpt-5.6-terra is usually not deployed.
License: Apache-2.0. Source and docs: https://github.com/gy15901580825/Argus
Metadata
Release files for argus-orchestrator 0.3.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| argus_orchestrator-0.3.2.tar.gz | 240.9 kB | With provenance | Details for argus_orchestrator-0.3.2.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| argus_orchestrator-0.3.2-py3-none-any.whl | Python 3 | none | any | Details for argus_orchestrator-0.3.2-py3-none-any.whl |
Total release size: 544.1 kB
Release files / argus_orchestrator-0.3.2.tar.gz
| Download URL | argus_orchestrator-0.3.2.tar.gz |
|---|---|
| Size | 240.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
e609c89cd63b707d8874b336d3faaccd09dcf385522f4578d06f05e22d1bcd4c
|
|
BLAKE2b-256 checksum How to use checksums |
d2714d14ce2b3b5ceee83f9bc92ad0b40943a6151c76001634a9df0d3ba538ae
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 26, 2026.
Transparency logRelease files / argus_orchestrator-0.3.2-py3-none-any.whl
| Download URL | argus_orchestrator-0.3.2-py3-none-any.whl |
|---|---|
| Size | 303.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
ee9a3068ece65f9474dda7bc9089aefb3f9ab68560490977b219e6871f6f8dde
|
|
BLAKE2b-256 checksum How to use checksums |
3b5a0d1b14ca02b113a419df39d183f6ebecd370b6b2fcb07ba51628432a150e
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 26, 2026.
Transparency logSecurity for argus-orchestrator 0.3.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for argus_orchestrator-0.3.2.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 26, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.