Ziran

taoq-ai/ziran

Security testing framework for AI agents that models tools as a graph to find dangerous tool chains, execution-level side effects, and multi-phase exploits

Python Apache-2.0

View on GitHub → Find it in the atlas

Install

pip install ziran

Repository reader

Explore before you clone

Read the project’s README, skills and supporting Markdown here. Rendered view is shown first; source is one click away when you need the exact text.

Fetched from GitHub
Open on GitHub
Loading the project’s README…

Public files are loaded on demand from the repository. The atlas does not copy or modify them.

Screenshot

Screenshot or social card for Ziran
The project's own screenshot, fetched from source rather than copied into this repository.

Platform support

Derived from the project's own README, install route, CI configuration and release assets — not from running it.
PlatformRuns hereOn what evidence
WindowsLikelyInferred from the language or runtime. Nothing in the project says so.
WSL2LikelyInferred from the language or runtime. Nothing in the project says so.
macOSLikelyInferred from the language or runtime. Nothing in the project says so.
LinuxLikelyInferred from the language or runtime. Nothing in the project says so.
DockerYesStated in the project's own README, install route, CI config or release assets.

Where it came from

Named by 1 of the 39 lists the atlas merges.

  • Agent Skill Security

How it is classified

One topic, 2 harnesses. Each link is a prerendered page of everything else in that slice.

Sandbox, Security & GovernanceMCPLangChain / LangGraph

Related in Sandbox, Security & Governance

Closest first — projects that plug into the same harnesses, then the ones the most lists agreed on.

  • AegisJustin0504/AegisPre-execution firewall that intercepts, classifies, and blocks agent tool calls before they execute, with a compliance cockpit for real-time…
  • agent-airlocksattyamjjain/agent-airlockDeny-by-default contract layer for agent tool calls that adds Pydantic strict validation, ghost-argument stripping and retryable fix hints through…
  • Armorer GuardArmorerLabs/Armorer-GuardLocal Rust scanner for AI-agent prompt injection, credential redaction, sensitive-data requests, exfiltration-style text, and dangerous tool-call…
  • Immunity AgentPrismorSec/prismorSecurity-focused AI agent runtime for scanning prompt injection, MCP risks, unsafe package installs, and dangerous agent actions before execution
  • PIC Standardpic-standard/pic-standardLocal-first standard and reference verifier that checks agent intent, provenance, and evidence at the action boundary and fails closed before…
  • skillfortifyqualixar/skillfortifyExternal: Formal verification scanner for AI agent skills (including Claude Code skills + MCP servers). 100% precision on 540-skill benchmark. ASBOM…
  • Brood Boxstacklok/brood-boxRun AI coding agents (Claude Code, Codex, OpenCode) inside hardware-isolated microVMs with snapshot isolation, egress control, and MCP authorization
  • Cordumcordum-io/cordumCordum (cordum.io) is a platform-only control plane for autonomous AI Agents and external workers. It uses NATS for the bus, Redis for state and…