vnx
Security for the AI agent supply chain.
vnx scans AI agent skills (SKILL.md + scripts) and MCP servers for what static
scanners miss: tool poisoning, credential exfiltration chains, rug pulls,
hidden-unicode smuggling, typosquats, and prompt-injection payloads — with an
evidence-based confidence engine built to keep false positives near zero.
╔═══════════════════════════════════╗
║ scan · gate · proxy ║
║ one engine, three checkpoints ║
╚═══════════════════════════════════╝
This is the
0.0.1name-reservation build. The full scanner (v0.2.0) is in final release preparation — 839 tests, CI-enforced benchmark of 100% recall on 12 rebuilt real-world incident PoCs (postmark-mcp, ClawHavoc, SANDWORM_MODE, Invariant tool-poisoning) and 0% false positives on benign skills. Star the repo to catch the drop.
What ships in v0.2.0
vnx scan— enumerate-everything static analysis: hidden files,.docx/zip unpacking,.pycvs source divergence, anti-truncation. 9 analyzers + an Opengrep taint engine tracing source→sink chains (env→network, file→egress, arg→exec). Correlation grouping collapses noise into named threats.vnx gate— blocking security hooks for Claude Code, Cursor, Codex CLI, and VS Code: malicious skills and MCP calls get denied before execution.vnx proxy— a runtime MCP firewall: tool-manifest pinning (rug-pull detection), argument DLP, response injection scanning, hash-chained audit log.- Offline-first. Zero accounts, zero telemetry, zero required API keys. Optional local-LLM (Ollama) and reputation layers are opt-in, never required.
- SARIF, GitHub Action, pre-commit, Docker, MCP-server mode — drops into whatever pipeline you already run.
Try the placeholder
uvx vnx # or: pipx run vnx
Links
- Repo: github.com/vnxrun/vnx
- Site: vnx.run
Apache-2.0 · built in public · no telemetry, ever
1 maintainer
Metadata
1 maintainer
Release files for vnx 0.0.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| vnx-0.0.1.tar.gz | 7.1 kB | With provenance | Details for vnx-0.0.1.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| vnx-0.0.1-py3-none-any.whl | Python 3 | none | any | Details for vnx-0.0.1-py3-none-any.whl |
Total release size: 14.6 kB
Release files / vnx-0.0.1.tar.gz
| Download URL | vnx-0.0.1.tar.gz |
|---|---|
| Size | 7.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
17e588ff542bbfb1329e2da1969afc38bbc005847eabce83af5003221d7bfea7
|
|
BLAKE2b-256 checksum How to use checksums |
ee99930e49318bc1d00743903bf5fcfbd5c9876929a9d3d5592ab5d0752b1906
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jul 28, 2026.
Transparency logRelease files / vnx-0.0.1-py3-none-any.whl
| Download URL | vnx-0.0.1-py3-none-any.whl |
|---|---|
| Size | 7.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
bd40cfbc03aa42c3215bdb2c8eca3ffd5726bfc25d18ee57f2e3e0e7d3bfcfe3
|
|
BLAKE2b-256 checksum How to use checksums |
e7aec3bfe233661afacf67417125cc3d0a7d9686c8168a046d4d5cb277f87414
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jul 28, 2026.
Transparency logSecurity for vnx 0.0.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for vnx-0.0.1.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jul 28, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
