Skip to main content

argus-orchestrator

The red-team engine of Argus, black-box red-team testing for AI agents. argus-probe run --local runs this package in-process. It contains:

  • the probe library: 205 probe YAML files mapped to OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF and the EU AI Act
  • target adapters for openai_compat, anthropic_native, custom_http, grpc, browser_use, payment_agent, mcp_agent, testbed_agent and http_upload agents
  • the judge, which scores each probe response against a rubric with an LLM

Most users want the CLI rather than this package:

pipx install "argus-probe[local]"

The import package is orchestrator.redteam. The FastAPI service in the repo's orchestrator/ directory is not part of this wheel.

Judge configuration

The judge reads these environment variables:

  • ANTHROPIC_API_KEY: used by the default provider (Anthropic).
  • OPENAI_API_KEY: used automatically when it is the only key set.
  • REDTEAM_MODEL_PROVIDER=litellm: runs the judge on a local or other model. Set REDTEAM_FAST_MODEL (for example ollama/qwen2.5:32b) and, for a non-default host, REDTEAM_LLM_API_BASE. Small models miss many jailbreaks, so a clean report from one is weak evidence. Local models other than Ollama (vLLM or LM Studio via openai/... with REDTEAM_LLM_API_BASE) are billed at the most expensive known rate, so pass --per-run-cap.
  • REDTEAM_MODEL_PROVIDER=azure: runs the judge on Azure OpenAI through litellm instead. Set AZURE_API_KEY, AZURE_API_BASE and AZURE_API_VERSION. The default deployment name is gpt-5.4-mini.
  • REDTEAM_FAST_MODEL, REDTEAM_STRONG_MODEL: optional model overrides for the two judge roles.

Azure's default content filter blocks judge calls because the judge reads attack text, so use a custom filter policy with jailbreak detection turned off for that deployment. If OPENAI_API_KEY is paired with REDTEAM_LLM_API_BASE pointing at Azure, set REDTEAM_FAST_MODEL and REDTEAM_STRONG_MODEL to your deployment names, because the default strong model gpt-5.6-terra is usually not deployed.

License: Apache-2.0. Source and docs: https://github.com/gy15901580825/Argus

Metadata

Release files for argus-orchestrator 0.3.3

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for argus-orchestrator 0.3.3
File Size Uploaded Provenance Actions
argus_orchestrator-0.3.3.tar.gz 263.7 kB With provenance Details for argus_orchestrator-0.3.3.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for argus-orchestrator 0.3.3
File Interpreter ABI Platform Actions
argus_orchestrator-0.3.3-py3-none-any.whl Python 3 none any Details for argus_orchestrator-0.3.3-py3-none-any.whl

Total release size: 594.1 kB

Release files / argus_orchestrator-0.3.3.tar.gz

Download URL argus_orchestrator-0.3.3.tar.gz
Size 263.7 kB
Tags Source
SHA-256 checksum
How to use checksums
dc55f3b4a16dee8f18f35a52c254ce66a9713eba3985d63509df53cfd4ad70aa
BLAKE2b-256 checksum
How to use checksums
da9217bad0213bbeb4d0c65395faca34d0c9e4101a5aa850f7e51b5f7731cf4c
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.

Transparency log

Release files / argus_orchestrator-0.3.3-py3-none-any.whl

Download URL argus_orchestrator-0.3.3-py3-none-any.whl
Size 330.4 kB
Tags Python 3
SHA-256 checksum
How to use checksums
4ee41380f195712604b9bddbaef1128b5d890717009e844d998a1a9ad4258fc3
BLAKE2b-256 checksum
How to use checksums
c49a3a495fa0271d615b2ccce0e9689c4fcec927b826a8f7c9d9b8fe2b7235cc
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.

Transparency log

Security for argus-orchestrator 0.3.3

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for argus_orchestrator-0.3.3.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page