blindoracle-massat-audit

Security audit for multi-agent AI systems - OWASP ASI01-ASI10

Safety Notice

This listing is from the official public ClawHub registry. Review SKILL.md and referenced scripts before running.

Copy this and send it to your AI assistant to learn

Install skill "blindoracle-massat-audit" with this command: npx skills add craigmbrown/massat-security-audit

BlindOracle MASSAT Security Audit

Run a comprehensive OWASP ASI01-ASI10 security assessment on any multi-agent system via the BlindOracle API. Returns risk scores (0-100) per category with remediation priorities.

When to Use

  • Before deploying a new multi-agent system to production
  • After adding new agents or tools to an existing fleet
  • As part of CI/CD pipeline security gates
  • For compliance reporting (OWASP Agentic AI Top 10)
  • To validate Microsoft AGT runtime governance is properly configured

Quick Reference

# Full audit (all 10 OWASP ASI categories)
curl -X POST https://craigmbrown.com/api/v1/massat/audit \
  -H "Content-Type: application/json" \
  -H "X-Payment: x402" \
  -d '{
    "target": "https://github.com/your-org/your-agent-repo",
    "scope": "full",
    "categories": ["ASI01","ASI02","ASI03","ASI04","ASI05","ASI06","ASI07","ASI08","ASI09","ASI10"]
  }'

# Quick scan (ASI01-ASI03 only, free tier)
curl -X POST https://craigmbrown.com/api/v1/massat/audit \
  -H "Content-Type: application/json" \
  -d '{"target": "https://github.com/your-org/your-agent-repo", "scope": "quick"}'

Response Format

{
  "audit_id": "a1b2c3d4",
  "overall_score": 72,
  "risk_level": "MEDIUM",
  "categories": {
    "ASI01": {"score": 85, "findings": 2, "critical": 0, "name": "Prompt Injection"},
    "ASI02": {"score": 60, "findings": 4, "critical": 1, "name": "Data Exfiltration"},
    "ASI03": {"score": 90, "findings": 1, "critical": 0, "name": "Broken Access Control"}
  },
  "total_findings": 23,
  "critical_findings": 3,
  "remediation_priority": ["ASI02", "ASI04", "ASI07"],
  "report_url": "https://craigmbrown.com/audits/a1b2c3d4.html"
}

Pricing

TierScopePriceCategories
FreeQuick scan$0ASI01-ASI03
FullComplete audit$50/useASI01-ASI10
APIMonthly subscription$99/moUnlimited

Payment

Full audits use x402 micropayments. Include X-Payment: x402 header with ecash token. Free quick scans require no payment (10/day limit).

Links

Source Transparency

This detail page is rendered from real SKILL.md content. Trust labels are metadata-based hints, not a safety guarantee.

Related Skills

Related by shared tags or category signals.

Security

JEP Guard

JEP Guard intercepts high-risk commands, requires user confirmation, issues temporary tokens, and logs actions with exportable audit receipts.

Registry SourceRecently Updated
4791Profile unavailable
Security

Agentshield Audit

Trust Infrastructure for AI Agents - Like SSL/TLS for agent-to-agent communication. 77 security tests, cryptographic certificates, and Trust Handshake Protoc...

Registry SourceRecently Updated
1.1K0Profile unavailable
Security

AgentMesh Governance

AI agent governance, trust scoring, and policy enforcement powered by AgentMesh. Activate when: (1) user wants to enforce token limits, tool restrictions, or...

Registry SourceRecently Updated
7910Profile unavailable
Security

S³ Security Audit

Run security audits on codebases using static analysis, dependency scanning, and manual code review patterns. Covers OWASP Top 10, secrets detection, depende...

Registry SourceRecently Updated
2160Profile unavailable