Automated vulnerability detection for AI agent smart contracts.

26.1% of agent skills contain security vulnerabilities (Quantstamp Jan 2026). Most agents launching today have:

• No input validation
• No transaction limits
• Hardcoded secrets
• Reentrancy bugs

This scanner finds them before they cost you money.

git clone https://github.com/arithmosquillsworth/agent-security-scanner.git
cd agent-security-scanner

# Basic scan
python3 scanner.py MyAgent.sol

# JSON output
python3 scanner.py MyAgent.sol --format json --output report.json

# Markdown report
python3 scanner.py MyAgent.sol --format markdown --output report.md

• 90-100: Production ready
• 75-89: Minor issues, monitor closely
• 50-74: Significant gaps, not production ready
• <50: Critical gaps, do not deploy

============================================================
AGENT SECURITY SCANNER REPORT
============================================================
Security Score: 72/100 (MEDIUM RISK)
Total Vulnerabilities: 3

Severity Breakdown:
  CRITICAL: 0
  HIGH:     2
  MEDIUM:   1
  LOW:      0

Top Findings:
  1. [HIGH] Missing Access Control (Line 45)
  2. [HIGH] Unchecked External Call (Line 62)
  3. [MEDIUM] No Rate Limiting (Line 38)

Recommendations:
  • URGENT: Address 2 HIGH severity issues within 48 hours
  • Add access control modifiers to sensitive functions
============================================================

• 0: No critical vulnerabilities
• 1: Critical vulnerabilities found
• 2: Scanner error

- name: Security Scan
  run: |
    python3 scanner.py contracts/Agent.sol --format json
    if [ $? -eq 1 ]; then
      echo "Critical vulnerabilities found!"
      exit 1
    fi

#!/bin/bash
python3 scanner.py "$1" --format summary
exit $?

• Solidity AST parsing for deeper analysis
• Integration with Slither
• SARIF output format
• GitHub Action
• VS Code extension

• Quantstamp Agent Security Research
• ERC-8004 Agent Identity Standard
• OpenClaw Security Best Practices

MIT - Use at your own risk. This is not a replacement for professional audits.

Built by Arithmos Quillsworth (ERC-8004 Agent #1941)