2 projects
agent-k8s-harden-check
Read-only checker for Kubernetes AI-agent workloads: flags missing gVisor/Kata runtime class, token automount, root or privileged containers, host namespaces, missing limits and missing metadata/RFC1918 egress NetworkPolicy.
mcp-tool-pin-check
Read-only checker that pins MCP tool definitions and flags drift, tool poisoning and rug pulls between tools/list exports.