State of AI Agent Security 2026
Empirical Security Analysis of 50 Leading Open-Source AI Agent Frameworks & Model Context Protocol (MCP) Servers.
Download Full PDF Audit Report (SHA-256 Verified)report_hash=be61e3d001f31c2dfa52fa4a…
100%
50 of 50 targets missing or weak schema enforcement
24%
6 MCP servers expose write/delete or shell capabilities
100%
50 setups vulnerable to intent/action mismatch attacks
100%
50 targets lack cryptographic evidence chain configuration
60
Mean security score across agent frameworks & templates
59.4
Mean security score across MCP server implementations
| Repository | Category | Score | Parameter Safety | Intent Risk | Audit Trail | Audit Hash |
|---|---|---|---|---|---|---|
| langchain-ai/langchain | framework | 60 | Missing | High | Absent | bf933d673291… |
| langchain-ai/langchainjs | framework | 60 | Missing | High | Absent | 9ef2c6c7688e… |
| crewAIInc/crewAI | framework | 60 | Missing | High | Absent | 184e46374e17… |
| Significant-Gravitas/AutoGPT | framework | 60 | Missing | High | Absent | ca1b3f46e3b8… |
| run-llama/llama_index | framework | 60 | Missing | High | Absent | 8160270d945c… |
| microsoft/autogen | framework | 60 | Missing | High | Absent | 591a13c54b49… |
| agno-agi/agno | framework | 60 | Missing | High | Absent | 3da2318af90e… |
| astronomer/astro-cli | framework | 60 | Missing | High | Absent | 4fcb1d29fd17… |
| superagent-ai/superagent | framework | 60 | Missing | High | Absent | a101e361f174… |
| e2b-dev/E2B | framework | 60 | Missing | High | Absent | d90987515542… |
| reworkd/AgentGPT | framework | 60 | Missing | High | Absent | f6a770aa4989… |
| yoheinakajima/babyagi | framework | 60 | Missing | High | Absent | 3f950c1e8962… |
| ComposioHQ/composio | framework | 60 | Missing | High | Absent | 820aa2cfb9b0… |
| smol-ai/developer | framework | 60 | Missing | High | Absent | bc980c6bd56b… |
| OpenBMB/ChatDev | framework | 60 | Missing | High | Absent | 2b2f337aedfa… |
| ShoggothAI/shoggoth | framework | 60 | Missing | High | Absent | 742be2629ecd… |
| assafmo/agent-template | framework | 60 | Missing | High | Absent | 199dbf4fe95a… |
| langchain-ai/agent-protocol-toolkit | framework | 60 | Missing | High | Absent | 8f55fad17204… |
| crewAIInc/crewAI-examples | framework | 60 | Missing | High | Absent | cd63396f508a… |
| run-llama/llama_index | framework | 60 | Missing | High | Absent | 8be93d114c06… |
| langgenius/dify | framework | 60 | Missing | High | Absent | c5e3b491e6e7… |
| FlowiseAI/Flowise | framework | 60 | Missing | High | Absent | 5f1b1e70f0d3… |
| activepieces/activepieces | framework | 60 | Missing | High | Absent | 0d96fed6b5f1… |
| n8n-io/n8n | framework | 60 | Missing | High | Absent | abb96eabd574… |
| kyegomez/swarms | framework | 60 | Missing | High | Absent | 386361f61d2f… |
| modelcontextprotocol/servers | mcp | 60 | Missing | High | Absent | 6a203aa2fba0… |
| punkpeye/awesome-mcp-servers | mcp | 60 | Missing | High | Absent | ad8fd0611b28… |
| mcp-servers/postgres | mcp | 60 | Missing | High | Absent | d53d2cf7c8fd… |
| mcp-servers/sqlite | mcp | 60 | Missing | High | Absent | 6092f6065ed9… |
| mcp-servers/gdrive | mcp | 60 | Missing | High | Absent | 3e3355f0f8f6… |
| mcp-servers/slack | mcp | 60 | Missing | High | Absent | 2e17092783ab… |
| mcp-servers/github | mcp | 60 | Missing | High | Absent | c78a8f30771a… |
| mcp-servers/puppeteer | mcp | 60 | Missing | High | Absent | eb4e1b5de098… |
| mcp-servers/fetch | mcp | 60 | Missing | High | Absent | 6b60e509d97a… |
| mcp-servers/memory | mcp | 60 | Missing | High | Absent | bd3e5f2a762f… |
| mcp-servers/brave-search | mcp | 60 | Missing | High | Absent | 2ed999e2c83f… |
| mcp-servers/git | mcp | 60 | Missing | High | Absent | 2111acca7836… |
| mcp-servers/evernote | mcp | 60 | Missing | High | Absent | 2ddefd191161… |
| mcp-servers/sentry | mcp | 60 | Missing | High | Absent | 72a2e645a3d7… |
| mcp-servers/zendesk | mcp | 60 | Missing | High | Absent | 0033f9efb2d7… |
| mcp-servers/linear | mcp | 60 | Missing | High | Absent | 7cf48b24b31f… |
| mcp-servers/notion | mcp | 60 | Missing | High | Absent | 6187874408f4… |
| mcp-servers/stripe | mcp | 45 | Missing | High | Absent | 14e223c2cb2c… |
| mcp-servers/redis | mcp | 60 | Missing | High | Absent | cd0cb44cfeb7… |
| mcp-servers/aws-kb-retrieval | mcp | 60 | Missing | High | Absent | ba4ab016b334… |
| mcp-servers/elasticsearch | mcp | 60 | Missing | High | Absent | f79e338fe3da… |
| mcp-servers/docker | mcp | 60 | Missing | High | Absent | 55cc503ec9f1… |
| mcp-servers/kubernetes | mcp | 60 | Missing | High | Absent | 2350975ba6d1… |
| mcp-servers/mongodb | mcp | 60 | Missing | High | Absent | bdbad4643ac1… |
| mcp-servers/jira | mcp | 60 | Missing | High | Absent | 3a18aa864036… |
Showing 50 of 50 audited targets · Generated 9/19/2026
Each repository was fetched via the GitHub Contents API into a temporary inspection surface (`temp_targets/`), then evaluated with the Nexus Shield scanner engine used by the public /scan endpoint.
Evaluation criteria: Parameter Validation Status (Missing / Weak / Enforced), Privilege Level (DB Write, Shell Exec, Admin File Access), Intent Divergence Vulnerability Risk (High / Medium / Low), and Cryptographic Audit Trail Capability (Present / Absent).
Every row receives a unique SHA-256 audit hash. Aggregated statistics and the full PDF report are sealed with a report-level verification hash for enterprise audit readiness.