---
type: email
from: raza sharif <notifications@github.com>
subject: [openai/openai-agents-python] Free OWASP security scanner for AI

 agents: mcps-audit (Issue #2678)
received: 2026-03-15 22:06:53
date_header: Sun, 15 Mar 2026 10:01:32 -0700
priority: normal
status: awaiting_approval
uid: 45728
---

## Email Content

**From:** raza sharif <notifications@github.com>
**Subject:** [openai/openai-agents-python] Free OWASP security scanner for AI

 agents: mcps-audit (Issue #2678)
**Date:** Sun, 15 Mar 2026 10:01:32 -0700

### Body (preview)

razashariff created an issue (openai/openai-agents-python#2678)



## Summary



Sharing a free CLI tool for the agent security community: **mcps-audit** scans AI agent code against the OWASP MCP Top 10 + OWASP Agentic AI Top 10 and generates a professional PDF security report.



```bash

npx mcps-audit ./my-agent

```



## Agentic AI Checks (12 rules)



- Dangerous execution (exec, eval, subprocess) — CRITICAL

- Hardcoded secrets — HIGH

- Excessive permissions — MEDIUM

- Prompt injection vectors — HIGH

- SQL/XSS/command injection patterns — CRITICAL

- Missing sandboxing — HIGH

- Supply chain (no lockfile) — LOW

- Excessive agency (auto_approve, bypass_safety) — HIGH

- Unsafe output (innerHTML) — MEDIUM

- No logging/monitoring — MEDIUM

- Data exfiltration patterns — HIGH

- No authentication on endpoints — HIGH



Each finding includes file path, line number, code snippet, OWASP risk, MITRE ATT&CK technique, and fix guidance.



## Tested against real agent frameworks



| Framework | Files | Findings | Verdict |

|-----------|------:|--------:|---------|

| CrewAI | 500 | 834 | FAIL |

| LangGraph | 322 | 1,018 | FAIL |

| Pydantic AI | 435 | 772 | FAIL |



All public repos, static pattern analysis only.



## Links



- **npm**: https://www.npmjs.com/package/mcps-audit

- **GitHub**: https://github.com/razashariff/mcps-audit

- **Sample report**: https://agentsign.dev/sample-report.pdf



MIT licensed. No code execution during scan, no data leaves the machine.



-- 

Reply to this email directly or view it on GitHub:

https://github.com/openai/openai-agents-python/issues/2678

You are receiving this because you are subscribed to this thread.



Message ID: <openai/openai-agents-python/issues/2678@github.com>

---

## Suggested Actions
- [ ] Reply
- [ ] Archive
- [ ] Escalate
