agent-rules-audit

Offline scanner for AI agent instruction files (AGENTS.md, CLAUDE.md, .cursorrules, skills, MCP configs) — flags prompt-injection payloads, hidden Unicode, encoded blobs, exfiltration and permission-bypass patterns. Zero dependencies, zero network calls.

GitHub

Official source

Start locally with the CLI guide