Semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, user input in system prompts, over-broad tools, MCP servers without auth, leaked keys and unsafe model loading. 36 tested rules, CWE and OWASP mapping.
Cross-referenced across 55 tracked directories
#2904
Popularity Rank
1 / 55
Listed In
Emerging
Adoption Stage
10/4/2026
Created
1
GitHub Stars
2
Forks
4
Open Issues
10/28/2026
Last Commit
Recently added to the ecosystem
Score: 71/100
0 dependency vulnerabilities found
bytedance
The Open-Source Multimodal AI Agent Stack: Connecting Cutting-Edge AI Models and Agent Infra
klim.paskov
One-time non-executable namespace claim for OIDC trusted-publisher setup.
Anirudhx7
Open-source MCP gateway for SuiteCRM : SSE transport, 13 tools, single and multi-entity install