Static analysis that catches the bugs only agent code can have — token bombing, prompt injection, missing oversight, compliance gaps — before they ship.
Every scan is a shareable report — view this one live
Most security tools find SQL injection. Inkog finds the things that only break in agent code:
- Token bombing — loops where the LLM controls termination, draining your API budget
- Recursive tool calling — one user request fans out into 10,000 LLM invocations
- Prompt injection sinks — RAG output flowing into a
systemprompt no one reviewed - Missing oversight — destructive tools (refunds, deletes, money) firing without human approval
- Cross-tenant leakage — global state shared between agent invocations
- MCP tool poisoning — malicious tool descriptions hijacking your agent
Findings map directly to EU AI Act Article 14 / 15, NIST AI RMF, ISO 42001, and OWASP LLM Top 10 — at the article level, not just bucket labels.
Try it on a public repo → · no signup, results in 60 seconds.
We scanned 500+ open-source AI agents. 85% had at least one vulnerability.
Other findings from the data:
- 63% of findings were CRITICAL or HIGH severity
- 25% failed EU AI Act Article 14 (human oversight)
- 11,705 total findings across LangChain · CrewAI · AutoGen · pydantic-ai · LangGraph · MCP servers · OpenAI Agents · n8n · Flowise · DSPy
The largest security analysis of the AI agent ecosystem — original data from automated static analysis, not surveys.
# No install
npx -y @inkog-io/cli scan .
# Or install permanently
brew tap inkog-io/inkog && brew install inkog
go install github.com/inkog-io/inkog/cmd/inkog@latest# Get a free API key at app.inkog.io
export INKOG_API_KEY=sk_live_...
inkog .- uses: inkog-io/inkog@v1
with:
api-key: ${{ secrets.INKOG_API_KEY }}
sarif-upload: true # findings show in the GitHub Security tabWorkflow example · GitLab / Azure / Jenkins templates
The closest direct alternative to Inkog is SplxAI Agentic Radar — also OSS, also static analysis of agent code. Honest side-by-side:
| Inkog | SplxAI Agentic Radar | |
|---|---|---|
| Approach | Static code analysis | Static code analysis |
| Frameworks supported | 21 (Python · TS · no-code) | 4 (CrewAI · LangGraph · OpenAI Agents · n8n) |
| Compliance mapping | Article-level (EU AI Act, NIST, ISO 42001, OWASP) | Generic risk taxonomy |
| MCP server auditing | ✓ | – |
| AGENTS.md governance verification | ✓ | – |
| Topology visualization | – | ✓ (interactive graph) |
| GitHub stars | 28 | 956 |
| License | Apache 2.0 CLI · proprietary engine | Fully OSS |
Different problem, complementary tools — use Inkog with one of these, not instead of:
- Dev-environment scanning — Snyk Agent Scan, AgentShield audit installed MCP servers and editor configs on your laptop (different scan target — your laptop, not your repo)
- Runtime adversarial probing — Lakera, Straiker, Crucible, MS Red Teaming Agent, NVIDIA Garak test deployed agents at the API boundary
- Quality / hallucination evaluation — Giskard, Patronus AI test answer correctness and safety, not code-level security
Code-first: LangChain · LangGraph · CrewAI · AutoGen · AG2 · OpenAI Agents · Semantic Kernel · Azure AI Foundry · LlamaIndex · Haystack · DSPy · Phidata · Smolagents · PydanticAI · Google ADK
No-code: n8n · Flowise · Langflow · Dify · Microsoft Copilot Studio · Salesforce Agentforce
npx -y @inkog-io/mcpAdds Inkog as an MCP server in Claude Code, Cursor, ChatGPT — 7 tools including MCP server auditing, Skill package scanning, multi-agent topology analysis. MCP integration →
Deep scan — orchestrator-driven analysis with enriched findings, agent profile, HTML report
inkog -deep .
inkog -deep -output html . > report.htmlSkill & MCP scan — audit SKILL.md packages and MCP servers
inkog skill-scan .
inkog mcp-scan github
inkog skill-scan --deep --repo https://github.com/org/repoInkog Red — adversarial testing of running agents
inkog red --target https://your-agent.example.comProbes prompt injection, jailbreaks, and tool misuse against live endpoints. Inkog Red docs →
Scan policies — five presets from low-noise to full-audit
inkog . --policy low-noise # only proven vulnerabilities
inkog . --policy balanced # default — vulnerabilities + risk patterns
inkog . --policy comprehensive # everything including hardening tips
inkog . --policy governance # Article 14 controls, authorization, audit trails
inkog . --policy eu-ai-act # EU AI Act compliance report- 💬 Discord — questions, feedback, feature requests
- 📚 Documentation
- 🐛 Issues
- 🤝 Contributing · Changelog
Apache 2.0 — see LICENSE.