Agent-Threat-Rule/agent-threat-rules

Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.

422Stars on the repository

35Mods indexed here, across every type

todayLast push, which is what freshness is scored on

MITLicence, which decides whether bodies are shown

Sort Relevance Recently updated Fewest tokens Security grade Repo stars Stars this week Top rated 1 mods

PreToolUse

Agent-Threat-Rule/agent-threat-rules

Hook Claude Code

Runs before the agent uses a tool, executing atr_scan.py via python3. From Agent-Threat-Rule/agent-threat-rules.

not rated 422 +5 today A tokens not measured original MIT