Metadata-Version: 2.4
Name: correctover-security-audit
Version: 1.2.0
Summary: AI Agent vulnerability scanner — 215 fault types, 88 detection rules, 52 ZDI cases. Scans MCP configs, agent code, framework implementations. 6 CVEs filed.
Project-URL: Homepage, https://correctover.com
Project-URL: Repository, https://github.com/Correctover/security-audit
Project-URL: Issues, https://github.com/Correctover/security-audit/issues
Author-email: Correctover <wangguigui@correctover.com>
License: Apache-2.0
Keywords: ai-agent,aisvs,audit,correctover,cve,mcp,owasp,rce,scanner,security,snyk,ssrf,vulnerability
Classifier: Development Status :: 4 - Beta
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Topic :: Security
Requires-Python: >=3.11
Requires-Dist: click>=8.0
Description-Content-Type: text/markdown

# 🔒 correctover-security-audit

**AI Agent Vulnerability Scanner — powered by CCS fault taxonomy v2.5.**

[![PyPI version](https://img.shields.io/pypi/v/correctover-security-audit.svg)](https://pypi.org/project/correctover-security-audit/)
[![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/)
[![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-green.svg)](https://opensource.org/licenses/Apache-2.0)

## Quick Start

```bash
pip install correctover-security-audit
correctover-security-audit quick
```

## What It Does

Scans MCP configurations, Agent code, and framework implementations for:

- **Command Injection** (CWE-78)
- **SSRF** (CWE-918)
- **Credential Exposure** (CWE-200)
- **Path Traversal** (CWE-22)
- **SQL/NoSQL Injection** (CWE-89)
- **Fail-Open Bypass** (CWE-636)

### Database

| Metric | Value |
|--------|-------|
| Fault types | 215 |
| Detection rules | 88 |
| ZDI cases | 52 |
| Verified PoCs | 8 |
| CVEs filed | 6 (AutoGen ×2, CrewAI, Semantic Kernel, MS AGT) |

## Free Tier

50 scans/day — no credit card required.

Unlock unlimited: [correctover.com/checkout](https://correctover.com/checkout)

```bash
export CORRECTOVER_LICENSE_KEY=your-key-here
```

## Related Correctover Tools

| Tool | Install | Description |
|------|---------|-------------|
| **Security Scanner** | `npx correctover-scan` | MCP config security audit (14 checks) |
| **Self-Healing Test** | `pip install correctover-test` | Agent self-healing test suite |
| **Vulnerability Scan** | `pip install correctover-security-audit` | 215 fault type scanner |
| **Compliance Check** | `pip install correctover-compliance-check` | OAuth 2.1 + CCS v1.0 |
| **Runtime Guard** | `pip install correctover-runtime-guard` | 22µs RCE/SSRF interception |
| **MCP Server** | `npm install correctover-mcp-server` | 6-dimension validation |

**Website**: [correctover.com](https://correctover.com) · **GitHub**: [github.com/Correctover](https://github.com/Correctover)
