Kryptos-AI is a powerful, multi-agent security pipeline designed to protect users from phishing, scams, and digital threats in real-time. It combines a Chrome extension for immediate detection, a sophisticated multi-agent backend for deep analysis, and a modern dashboard for comprehensive reporting.
├── extension/ # Chrome Extension (Manifest V3)
│ ├── popup.js/html # Tool for manual text/screenshot analysis
│ ├── content.js # Link hover detection and page scanning
│ └── background.js # Orchestrator for extension events
├── backend/ # FastAPI Backend
│ ├── agents/ # Multi-agent logic (Scout, Analyst, Educator)
│ ├── main.py # Orchestrator and WebSocket server
│ ├── contracts.py # Data models (Pydantic) for agent communication
│ └── .env # Environment secrets (API Keys, MongoDB)
└── webapp/ # React + Vite Dashboard
├── src/ # UI Components and state management
└── tailwind.config # Modern styling framework
cd backend
python -m venv venv
.\venv\Scripts\activate # Windows
source venv/bin/activate # Mac/Linux
pip install -r requirements.txt- Copy the example env and add your keys:
cp backend/.env.example backend/.env, then editbackend/.envwith yourOPENROUTER_API_KEY,MONGODB_URI(optional: defaults to localhost), and any other API keys you need.
- Open Chrome and navigate to
chrome://extensions. - Enable Developer mode (top right).
- Click Load unpacked and select the
/extensionfolder.
- Backend:
uvicorn main:app --reload --port 8000 - Dashboard:
cd webapp && npm install && npm run dev
Kryptos-AI uses a structured "Scout → Analyst → Educator" pipeline to process threats:
- Scout Agent (First Response):
- Performs lightweight keyword analysis and URL scanning.
- Calculates an initial risk score and decides whether to escalate to deep analysis.
- Analyst Agent (Deep Inspection):
- Uses LLMs (Gemini 2.0 via OpenRouter) to identify specific threat types.
- Maps threats to MITRE ATT&CK techniques and gathers evidence.
- Educator Agent (User Guidance):
- Translates complex technical analysis into clear, actionable advice.
- Generates "Next Steps" and defensive learning points for the user.
- Orchestrator:
- Manages the data flow between agents.
- Broadcasts results in real-time to the Webapp using WebSockets.
- API Safety: Never commit your
.envfile. EnsureOPENROUTER_API_KEYis kept private. - Privacy: The extension includes Localhost Exceptions to avoid scanning local development environments.
- Screenshot Analysis: Image data is converted to Base64 and processed securely via vision models.
| Issue | Solution |
|---|---|
| Port Conflict (WinError 10013) | Run backend on 8001: uvicorn main:app --port 8001 then update BACKEND_URL in extension/background.js. |
| Extension not working | Ensure the backend is running and click the Refresh icon in chrome://extensions. |
| MongoDB Errors | If not using a remote Atlas DB, ensure MongoDB is running locally on port 27017. |
| Reload Loop | If Uvicorn reloads constantly, use --reload-exclude venv. |