@agent-threat-rule/agent-threat-rules
AMCP server package agent-threat-rules
Install
agr install @agent-threat-rule/agent-threat-rules --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "agent-threat-rules", "version": "3.5.11", "mcpName": "io.github.Agent-Threat-Rule/agent-threat-rules", "type": "module", "description": "Open detection standard -- like Sigma, but for AI agents. Executable rules for prompt injection, tool poisoning, context exfiltration, and MCP attacks. Shipped in Cisco AI Defense. MIT-licensed.", "main": "./dist/index.js", "types": "./dist/index.d.ts", "bin": { "atr": "./dist/cli.js", "agent-threat-rules": "./dist/cli.js" }, "exports": { ".": { "import": "./dist/index.js", "types": "./dist/index.d.ts" }, "./quality": { "import": "./dist/quality/index.js", "types": "./dist/quality/index.d.ts" }, "./mcp": { "import": "./dist/mcp-server.js", "types": "./dist/mcp-server.d.ts" }, "./converters/sage": { "import": "./dist/converters/sage.js", "types": "./dist/converters/sage.d.ts" }, "./converters/sage-reverse": { "import": "./dist/converters/sage-reverse.js", "types": "./dist/converters/sage-reverse.d.ts" }, "./mastra": { "import": "./dist/adapters/mastra.js", "types": "./dist/adapters/mastra.d.ts" }, "./openshell-filter": { "import": "./dist/adapters/openshell-filter.js", "types": "./dist/adapters/openshell-filter.d.ts" }, "./nemoclaw-preflight": { "import": "./dist/adapters/nemoclaw-preflight.js", "types": "./dist/adapters/nemoclaw-preflight.d.ts" }, "./rules": "./rules", "./spec": "./spec/atr-schema.yaml" }, "engines": { "node": ">=18.0.0" }, "license": "MIT", "repository": { "type": "git", "url": "https://github.com/Agent-Threat-Rule/agent-threat-rules.git" }, "homepage": "https://github.com/Agent-Threat-Rule/agent-threat-rules", "bugs": { "url": "https://github.com/Agent-Threat-Rule/agent-threat-rules/issues" }, "keywords": [ "ai-security", "agent-security", "prompt-injection", "sigma-rules", "threat-detection", "mcp-security", "llm-security", "atr" ], "publishConfig": { "access": "public" }, "files": [ "dist", "spec", "rules", "package.json", "README.md" ], "scripts": { "build": "tsc -p tsconfig.json", "clean": "rm -rf dist tsconfig.tsbuildinfo", "typecheck": "tsc --noEmit", "typecheck:scripts": "tsc -p tsconfig.scripts.json", "test": "vitest run", "dev": "tsc --build --watch", "validate": "tsx tests/validate-rules.ts", "audit:mappings": "tsx scripts/audit-mappings.ts", "validate:compliance": "tsx scripts/validate-compliance.ts", "eval": "tsx src/eval/run-eval.ts", "eval:pint": "tsx src/eval/run-pint-benchmark.ts", "eval:generalization": "tsx scripts/eval-generalization.ts --all", "gate:generalization": "tsx scripts/eval-generalization.ts --gate", "gate:rule-latency": "tsx scripts/gate-rule-latency.ts", "compile:yara": "tsx scripts/compile-yara.ts --all rules/", "compile:sigma": "python3 scripts/generate-sigma.py --all --out docs/sigma-export/rules", "prepublishOnly": "npm run build", "prepare": "npm run build 1>&2", "compile:pipelock": "tsx scripts/compile-pipelock.ts", "reconcile-stats": "node scripts/reconcile-rule-count.mjs", "count:rules": "node scripts/reconcile-rule-count.mjs --report", "gate:rule-status": "tsx scripts/gate-rule-status.ts" }, "dependencies": { "@modelcontextprotocol/sdk": "^1.12.0", "js-yaml": "^4.1.0" }, "devDependencies": { "@anthropic-ai/sdk": "^0.81.0", "@types/estree": "^1.0.8", "@types/js-yaml": "^4.0.9", "@types/node": "^22.14.0", "@vitest/coverage-v8": "^3.2.4", "@xenova/transformers": "^2.17.2", "acorn": "^8.16.0", "acorn-walk": "^8.3.5", "exceljs": "^4.4.0", "tsx": "^4.7.0", "typescript": "~5.7.3", "vitest": "^3.0.0" } }
Trustgrade A
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- passLicense
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-31c30447b7752026-08-06