Agent-Threat-Rule/agent-threat-rules

Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.

426Stars on the repository

37Mods indexed here, across every type

todayLast push, which is what freshness is scored on

MITLicence, which decides whether bodies are shown

Sort Relevance Recently updated Fewest tokens Security grade Repo stars Stars this week Top rated 1 mods

filesystem

Agent-Threat-Rule/agent-threat-rules

MCP server Claude CodeCodexCursor +2

Gives the agent read and write access to a set of allowed directories on the local filesystem. Runs locally from the @modelcontextprotocol/server-filesystem npm package.

not rated 426 +4 today A tokens not measured original MIT