Open an account
KYA™ · Know Your Agent

Agent Trust Registry

Public registry of preliminary KYA™ signals for source-visible agent projects.
Scores support due diligence and capability controls. They are not final security certifications.

30
Agents tracked
30
Preliminary scans
3280
Findings flagged
2181
CVEs detected
Static analysis + OSV.dev CVE scan + NVIDIA Llama 70B audit · Questions? [email protected]
Tiers
Sovereign ≥85
Partner ≥75
Node ≥60
Rejected <58
Blended score: 30% manual baseline + 70% live analysis
Audit Methodology

How we score agents

Every score in this registry is produced by a three-stage preliminary pipeline run against a prioritized sample of the agent's public source code, no installs, no clones, no marketing materials. We inspect capabilities, check dependencies, and run an independent AI review.

Scores are a blend of our manual safety baseline (30%) and the live analysis result (70%). The baseline captures things code can't show: organizational maturity, incident history, and published safety disclosures. The live analysis reflects what's actually in the codebase today.

On false positives. Static analysis is inherently noisy. A CLI tool using child_process looks the same as a malicious subprocess call. An agent that legitimately browses the web will flag network patterns. We surface these signals, we don't suppress them, because the operator needs to make that judgment for their context. Over time, our detection patterns improve as we build type-aware and context-aware rules. Treat scores as a starting point for due diligence, not a final verdict.

01

Static code analysis

Pattern-based scan across a prioritized source sample fetched via GitHub API, no disk writes, no execution. We flag capabilities such as shell execution, code evaluation, and network access for review. A capability signal is not, by itself, a confirmed vulnerability.

02

Dependency CVE scan

We parse package.json and requirements.txt files without installing anything. Each dependency is queried against OSV.dev, Google's open vulnerability database, using their batch API. CVSS ≥7.0 is flagged as High, 4.0-7.0 as Medium. We also flag unpinned version ranges (^, ~, *) as supply chain risk.

03

AI-powered semantic audit

Source files are passed to a large language model (Llama 3.1 70B via NVIDIA NIM) with a structured security prompt. The model looks for issues static patterns miss: unsafe prompt construction, missing input validation on tool calls, context leakage between sessions, and missing human-in-the-loop checkpoints. This stage catches behavioral risks, not just syntactic ones.

04

Score composition

Five dimensions are scored: Framework (design-level guardrails), Code Health (quality and safety of implementation), Tool Permissions (blast radius of tool access), Prompt Safety (injection resistance), and Loop Safety (termination guarantees). These combine into a raw score, which is then blended with our manual baseline. Scores are re-run periodically as frameworks evolve.

Code Source Available
79
Claude Code
Anthropic
Partner Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:2 M:3 I:1
Prompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
60/1369 prioritized files · 318b7e6
General Open Source
78
UI-TARS
ByteDance
Partner Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:1 M:2 I:6
Prompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
4/5 prioritized files · 582f3a7
General Open Source
76
LangChain Agent
LangChain Inc.
Partner Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:1 M:2 I:2
Prompt Safety
Top finding ████████████████████████████████████, classified
60/2640 prioritized files · 8d34066
Multi-Agent Open Source
76
LangGraph
LangChain Inc.
Partner Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:1 M:2 I:5
Prompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
20 deps scanned via OSV.dev
60/494 prioritized files · 4136a6b
Multi-Agent Open Source
71
CrewAI
CrewAI Inc.
Node Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:1 M:3 I:40
Prompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
60/1454 prioritized files · 38db11e
General Open Source
69
OpenClaw
OpenClaw Labs
Node Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:2 M:4 I:2 CVE:2
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
70 deps scanned via OSV.dev
60/48215 prioritized files · 59ed0c1
General Open Source
66
ZeroClaw
ZeroClaw Labs
Node Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:1 M:8 I:93 CVE:6
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
30 deps scanned via OSV.dev
41/149 prioritized files · 5d4b18d
Multi-Agent Open Source
64
AutoGen
Microsoft Research
Node Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:2 M:6 I:9 CVE:4
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
38 deps scanned via OSV.dev
60/593 prioritized files · 004749e
General Open Source
64
PicoClaw
Sipeed
Node Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:2 M:7 I:5 CVE:5
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
50 deps scanned via OSV.dev
60/64 prioritized files · bbf6893
General Open Source
63
Moltis
Moltis Org
Node Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:1 M:9 I:30 CVE:6
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
23 deps scanned via OSV.dev
60/297 prioritized files · 8a12400
Multi-Agent Open Source
62
OpenAI Swarm
OpenAI
Node Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:4 M:3 I:5
Loop SafetyPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
55/63 prioritized files · 6af0b4c
General Open Source
60
Agno
Agno (ex-Phidata)
Node Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:1 M:665 I:1 CVE:663
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
345 deps scanned via OSV.dev
60/5401 prioritized files · 6d5af04
Code Open Source
60
OpenHands
All Hands AI
Node Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:1 M:32 I:13 CVE:30
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
101 deps scanned via OSV.dev
54/1197 prioritized files · b185939
General Open Source
60
UI-TARS Desktop
ByteDance
Node Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:1 M:269 I:63 CVE:267
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
377 deps scanned via OSV.dev
60/1264 prioritized files · 3ac2cb8
General Open Source
58
IronClaw
Near AI
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:2 M:18 I:11 CVE:16
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
49 deps scanned via OSV.dev
53/607 prioritized files · b0b999d
General Open Source
56
LlamaIndex
LlamaIndex Inc.
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:1 M:228 I:1 CVE:225
Dependency VulnerabilityTool Abuse Risk
Top finding ████████████████████████████████████, classified
217 deps scanned via OSV.dev
60/3886 prioritized files · 619d746
General Open Source
56
Semantic Kernel
Microsoft
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:2 M:107 I:11 CVE:106
Loop SafetyDependency VulnerabilityPrompt Safety
Top finding ████████████████████████████████████, classified
33 deps scanned via OSV.dev
60/1278 prioritized files · 483ffb4
General Open Source
56
Hermes Agent
NousResearch
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:1 M:13 I:7 CVE:11
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
176 deps scanned via OSV.dev
50/13641 prioritized files · 1d258cc
General Open Source
55
AutoGPT
Significant Gravitas
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:1 M:22 I:31 CVE:20
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
144 deps scanned via OSV.dev
28/4937 prioritized files · 25511c5
General Open Source
55
OpenFang
RightNow AI
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:2 M:23 I:392 CVE:21
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
9 deps scanned via OSV.dev
36/39 prioritized files · acf2587
General Open Source
54
Mastra
Mastra AI
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:2 M:31 I:54 CVE:29
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
175 deps scanned via OSV.dev
60/14063 prioritized files · f3e1b23
Multi-Agent Open Source
54
Paperclip
PaperclipAI
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:2 M:44 I:46 CVE:41
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
168 deps scanned via OSV.dev
60/6717 prioritized files · 3f36947
Multi-Agent Open Source
53
Agency Swarm
VRSEN
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:1 M:36 I:12 CVE:34
Dependency VulnerabilityTool Abuse Risk
Top finding ████████████████████████████████████, classified
22 deps scanned via OSV.dev
60/436 prioritized files · 5b02d5f
General Open Source
50
Cherry Studio
CherryHQ
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:3 M:122 I:16 CVE:120
Loop SafetyDependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
462 deps scanned via OSV.dev
44/5910 prioritized files · 03963f1
Research Open Source
49
Dexter
virattt
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:3 M:30 I:12 CVE:28
Loop SafetyDependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
35 deps scanned via OSV.dev
60/218 prioritized files · 534f6be
General Open Source
48
PydanticAI
Pydantic
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:3 M:38 I:4 CVE:35
Loop SafetyDependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
13 deps scanned via OSV.dev
34/2136 prioritized files · 4ee1151
General Open Source
48
smolagents
Hugging Face
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:3 M:264 I:35 CVE:262
Loop SafetyDependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
26 deps scanned via OSV.dev
27/77 prioritized files · 96f33fa
General Open Source
47
Strands Agents
AWS / Strands
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:3 M:32 I:37 CVE:29
Loop SafetyDependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
162 deps scanned via OSV.dev
59/2067 prioritized files · 10b9393
Multi-Agent Open Source
47
MetaGPT
FoundationAgents
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:3 M:180 I:13 CVE:178
Loop SafetyDependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
97 deps scanned via OSV.dev
60/919 prioritized files · 11cdf46
General Open Source
45
Nanobot
HKUDS
Rejected Preliminary scan Oct 25, 2026 Static refresh · AI findings preserved
H:4 M:45 I:18 CVE:43
Loop SafetyDependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████, classified
74 deps scanned via OSV.dev
32/1389 prioritized files · 4f7c4f0

Apply for a KYA™ evaluation.

Approved capabilities depend on your agent, operator, jurisdiction, cohort, and licensed infrastructure partners. A preliminary registry score does not guarantee financial access.

Get Quick Sell token