eulogik/opentrustbench repository overview

⁠OpenTrustBench

Free, local-first security scanner for AI agents and MCP servers. 8 OWASP-mapped rules, Trust Cards graded A–F, SARIF output for CI.

⁠Quick Start

docker run --rm -v $(pwd):/workspace eulogik/opentrustbench scan .

⁠Features

• 8 detection rules mapped to OWASP Agentic Top 10 and LLM Top 10 2025
• Trust Cards graded A–F with 0–100 scores
• Permission manifest extraction
• SARIF output for GitHub Code Scanning
• CI gate: --fail-on high

⁠Links

• Website: https://www.opentrustbench.com⁠
• GitHub: https://github.com/eulogik/OpenTrustBench⁠
• npm: https://www.npmjs.com/package/@opentrustbench/cli⁠

⁠License

Apache-2.0