Find vulnerabilities before attackers do. 147 security checks, 55 attack payloads, auto-remediation with rollback, and OASB benchmark compliance.
$ npx hackmyagent secure
HackMyAgent v1.5.0
Scanning 147 checks across 30 categories...
CRITICAL CRED-001 Hardcoded API key in config.json
CRITICAL MCP-003 MCP server with root filesystem access
HIGH NET-001 Server bound to 0.0.0.0
HIGH PERM-001 World-readable secret files
MEDIUM GIT-002 Incomplete .gitignore patterns
LOW LOG-001 Missing audit trail configuration
Results: 6 findings (2 critical, 2 high, 1 medium, 1 low)
Run with --fix to auto-remediate 5 of 6 findings.Three modes of operation: scan for vulnerabilities, attack with adversarial payloads, and auto-fix with safe rollback.
147 checks across 30 categories. Auto-detect misconfigurations, hardcoded credentials, exposed endpoints, and supply chain risks.
55 adversarial payloads across 5 categories. Red team your agent with prompt injection, jailbreak, data exfiltration, capability abuse, and context manipulation.
Auto-remediation with rollback. Dry-run preview before applying changes. Automatic backups so you can undo any fix instantly.
No config files required. Works out of the box with zero dependencies.
# Run directly (no install needed)
$ npx hackmyagent secure
# Scan and auto-fix
$ npx hackmyagent secure --fix
# Preview fixes before applying
$ npx hackmyagent secure --fix --dry-run
# Red team with adversarial payloads
$ npx hackmyagent attack --local
# Run OASB benchmark
$ npx hackmyagent secure -b oasb-1
# Rollback any changes
$ npx hackmyagent rollbackEvery scan runs 147 checks across 30 categories covering credentials, network, injection, encryption, supply chain, and more.
| Platform | What HackMyAgent Scans |
|---|---|
| Claude Code | CLAUDE.md, skills, MCP server configs |
| Cursor | .cursor/ rules, MCP configurations |
| VS Code | .vscode/mcp.json configurations |
| Generic MCP | Any MCP server setup |
Run the Open Agent Security Benchmark (OASB-1) directly from HackMyAgent. 46 controls across 10 categories with three maturity levels.
$ npx hackmyagent secure -b oasb-1
OASB-1 Benchmark Assessment
Level: L1 Essential (26 controls)
PASS Identity and Provenance 4/4
PASS Capability and Authorization 5/5
PASS Input Security 5/5
WARN Output Security 3/4
PASS Credential Protection 5/5
FAIL Supply Chain Integrity 2/5
Score: 84/100
Rating: Passing