ReadBeforeRunAgentic Security Field Guide

Catalog / mission

Agent security

2 tools.

  1. 12232?
    Cisco MCP Scanner PluginPlugin · by cisco-ai-defense · reach 3, privilegedDraft · awaiting review

    Claude Code plugin that scans MCP servers and tools for prompt injection, tool poisoning and other risks via the Cisco MCP scanner.

    Can read credential stores · talk to any host · run shell commands or eval · +1 more · Approval: no evidence · ran once, 2026-11-07: did more than it said · checked 2026-11-07

    Code shows
  2. 012102
    Trail of Bits Agentic Actions AuditorPlugin · by trailofbits · reach 2, openDraft · awaiting review

    Claude Code plugin that statically audits GitHub Actions workflows which invoke AI coding agents for injection and permission flaws.

    Can run shell commands or eval · run with broad pre-approvals · not run yet · checked 2026-10-19

    Code shows