Static, no-execution security checks for Hermes Agent plugins
-
Updated
Nov 10, 2026 - Python
#
plugin-security
Here are 9 public repositories matching this topic...
WP Hunter is a bilingual command-line toolkit for collecting WordPress.org and Patchstack VDP targets, downloading verified plugin archives, and running fail-safe Semgrep triage.
-
Updated
Oct 20, 2026 - Python
This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE-2024-10508). It checks for the presence of a specific version (`6.0.2.6`) and marks the site as vulnerable if found. The results are saved in a file (`vuln.txt`) for further analysis.
python wordpress vulnerability wordpress-security vulnerability-detection security-tools vulnerability-scanner plugin-security cve-scanner cve-2024-10508 registrationmagic
-
Updated
May 30, 2026 - Python
Security sandbox for Hermes Agent plugins: test any plugin in a disposable, no-network Docker container with decoy secrets before you install it. Shows what it actually did, mapped to MITRE ATT&CK and ATLAS. Hermes Security reviews code you wrote; Detonator tests code you didn’t.
docker sandbox dynamic-analysis malware-analysis ai-agents security-testing ai-security plugin-security supply-chain-security llm-security plugin-scanner hermes-agent nous-research hermes-plugin hermes-agent-plugin
-
Updated
Nov 12, 2026 - Python
Reproducible dataset of abandoned WordPress plugins (10K+ active installs, 2+ years no update). Companion to royalplugins.com/plugin-graveyard/. Snapshot June 2026: 176 plugins, 4.93M installs at risk.
wordpress reproducible-research open-data dataset web-security wordpress-plugins content-management-system plugin-security software-ecosystem abandoned-software
-
Updated
Jun 29, 2026 - Python
Security research, datasets, and reproducible findings from AgentGuard across AI agents, plugins, MCP ecosystems, and agent runtimes.
cybersecurity ai-agents security-research ai-security security-dataset plugin-security supply-chain-security agentguard deepseek-harness deepseek-harness-plugin
-
Updated
Oct 22, 2026 - Python
Audit where your Claude Code plugins actually came from — and catch silent drift.
python cli security ai mcp supply-chain plugins provenance cybersecurity devsecops ai-agents ai-security plugin-security supply-chain-security model-context-protocol claude-code
-
Updated
Nov 10, 2026 - Python
Codex Skill：审计 Skill 和 AI agent 工具包的脚本、密钥、外部网络、权限边界与供应链风险
security-audit developer-tools secret-scanning plugin-security supply-chain-security ai-governance prompt-injection skill-marketplace ai-agent-security codex-skill skill-security
-
Updated
Jul 7, 2026 - Python
Lint AI-agent plugins, skills, MCP configs and marketplaces for supply-chain attack patterns (Plugin4Shell class).
-
Updated
Oct 4, 2026 - Python
Add this topic to your repo
To associate your repository with the plugin-security topic, visit your repo's landing page and select "manage topics."