KYA™ · Know Your Agent

Agent Trust Registry

Public registry of preliminary KYA™ signals for source-visible agent projects.
Scores support due diligence and capability controls. They are not final security certifications.

30
Agents tracked
30
Preliminary scans
2030
Findings flagged
766
CVEs detected
Static analysis + OSV.dev CVE scan + NVIDIA Llama 70B audit · Questions? [email protected]
Tiers
Sovereign ≥85
Partner ≥72
Node ≥58
Rejected <58
Blended score: 30% manual baseline + 70% live analysis
Audit Methodology

How we score agents

Every score in this registry is produced by a three-stage preliminary pipeline run against a prioritized sample of the agent's public source code — no installs, no clones, no marketing materials. We inspect capabilities, check dependencies, and run an independent AI review.

Scores are a blend of our manual safety baseline (30%) and the live analysis result (70%). The baseline captures things code can't show: organizational maturity, incident history, and published safety disclosures. The live analysis reflects what's actually in the codebase today.

On false positives. Static analysis is inherently noisy. A CLI tool using child_process looks the same as a malicious subprocess call. An agent that legitimately browses the web will flag network patterns. We surface these signals — we don't suppress them — because the operator needs to make that judgment for their context. Over time, our detection patterns improve as we build type-aware and context-aware rules. Treat scores as a starting point for due diligence, not a final verdict.

01

Static code analysis

Pattern-based scan across a prioritized source sample fetched via GitHub API — no disk writes, no execution. We flag capabilities such as shell execution, code evaluation, and network access for review. A capability signal is not, by itself, a confirmed vulnerability.

02

Dependency CVE scan

We parse package.json and requirements.txt files without installing anything. Each dependency is queried against OSV.dev — Google's open vulnerability database — using their batch API. CVSS ≥7.0 is flagged as High, 4.0–7.0 as Medium. We also flag unpinned version ranges (^, ~, *) as supply chain risk.

03

AI-powered semantic audit

Source files are passed to a large language model (Llama 3.1 70B via NVIDIA NIM) with a structured security prompt. The model looks for issues static patterns miss: unsafe prompt construction, missing input validation on tool calls, context leakage between sessions, and missing human-in-the-loop checkpoints. This stage catches behavioral risks, not just syntactic ones.

04

Score composition

Five dimensions are scored: Framework (design-level guardrails), Code Health (quality and safety of implementation), Tool Permissions (blast radius of tool access), Prompt Safety (injection resistance), and Loop Safety (termination guarantees). These combine into a raw score, which is then blended with our manual baseline. Scores are re-run periodically as frameworks evolve.

Code Source Available
83
Claude Code
Anthropic
Partner Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:1 M:2 I:80
Prompt Safety
Top finding ████████████████████████████████████ — classified
20/26 prioritized files · feabcc3
General Open Source
78
IronClaw
Near AI
Partner Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:1 M:2 I:168
Prompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
13 deps scanned via OSV.dev
24/377 prioritized files · dab6791
General Open Source
77
ZeroClaw
ZeroClaw Labs
Partner Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:1 M:2 I:38
Prompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
26 deps scanned via OSV.dev
44/47 prioritized files · 5c027b6
General Open Source
74
OpenClaw
OpenClaw Labs
Partner Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:2 I:2
Prompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
61 deps scanned via OSV.dev
60/16239 prioritized files · ac9a219
General Open Source
74
UI-TARS
ByteDance
Partner Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:2 I:5
Prompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
4/5 prioritized files · 582f3a7
General Open Source
73
LangChain Agent
LangChain Inc.
Partner Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:2 I:1
Prompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
60/2490 prioritized files · cdafe60
General Open Source
72
PicoClaw
Sipeed
Partner Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:2 I:5
Prompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
50 deps scanned via OSV.dev
60/64 prioritized files · 89ee8f1
Multi-Agent Open Source
71
LangGraph
LangChain Inc.
Node Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:2 I:6
Prompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
20 deps scanned via OSV.dev
60/460 prioritized files · 2b1abc8
Multi-Agent Open Source
70
CrewAI
CrewAI Inc.
Node Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:2 I:40
Prompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
60/1220 prioritized files · 3723f0d
General Open Source
70
PydanticAI
Pydantic
Node Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:3 I:6
Loop SafetyPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
6 deps scanned via OSV.dev
49/609 prioritized files · 1b42945
Multi-Agent Open Source
69
AutoGen
Microsoft Research
Node Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:3 I:9 CVE:1
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
38 deps scanned via OSV.dev
60/593 prioritized files · 027ecf0
Research Open Source
65
Dexter
virattt
Node Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:5 I:12 CVE:3
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
35 deps scanned via OSV.dev
60/185 prioritized files · 8d94198
General Open Source
63
Moltis
Moltis Org
Node Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
M:12 I:27 CVE:10
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
23 deps scanned via OSV.dev
60/272 prioritized files · a568a3c
Multi-Agent Open Source
62
OpenAI Swarm
OpenAI
Node Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:4 M:3 I:5
Loop SafetyPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
55/63 prioritized files · 6af0b4c
General Open Source
57
LlamaIndex
LlamaIndex Inc.
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:1 M:12 I:2 CVE:10
Dependency VulnerabilityTool Abuse Risk
Top finding ████████████████████████████████████ — classified
17 deps scanned via OSV.dev
60/3958 prioritized files · 9aa5ee5
General Open Source
56
Semantic Kernel
Microsoft
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:82 I:11 CVE:81
Loop SafetyDependency VulnerabilityPrompt Safety
Top finding ████████████████████████████████████ — classified
34 deps scanned via OSV.dev
60/1266 prioritized files · 417d62f
General Open Source
56
UI-TARS Desktop
ByteDance
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:154 I:63 CVE:152
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
376 deps scanned via OSV.dev
60/1252 prioritized files · e9f3387
Multi-Agent Open Source
55
Paperclip
PaperclipAI
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:21 I:35 CVE:19
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
100 deps scanned via OSV.dev
60/1526 prioritized files · b2a33d0
General Open Source
55
OpenFang
RightNow AI
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:12 I:392 CVE:10
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
9 deps scanned via OSV.dev
36/39 prioritized files · acf2587
Code Open Source
54
OpenHands
All Hands AI
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:3 M:9 I:10 CVE:5
Loop SafetyDependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
96 deps scanned via OSV.dev
60/1314 prioritized files · 03aab93
General Open Source
53
Mastra
Mastra AI
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:80 I:54 CVE:78
Dependency VulnerabilityTool Abuse RiskPrompt Safety
Top finding ████████████████████████████████████ — classified
196 deps scanned via OSV.dev
60/5955 prioritized files · 6759c34
General Open Source
52
Hermes Agent
NousResearch
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:19 I:18 CVE:17
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
164 deps scanned via OSV.dev
34/2611 prioritized files · 6f6eb87
General Open Source
51
AutoGPT
Significant Gravitas
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:13 I:21 CVE:11
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
150 deps scanned via OSV.dev
20/1863 prioritized files · 2ca389e
General Open Source
50
Agno
Agno (ex-Phidata)
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:3 M:131 I:3 CVE:129
Dependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
354 deps scanned via OSV.dev
60/3938 prioritized files · 5b9cfec
General Open Source
50
Cherry Studio
CherryHQ
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:3 M:63 I:10 CVE:61
Loop SafetyDependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
438 deps scanned via OSV.dev
60/2498 prioritized files · 6f2f551
General Open Source
48
Nanobot
HKUDS
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:19 I:29 CVE:17
Loop SafetyDependency VulnerabilityTool Abuse RiskPrompt Safety
Top finding ████████████████████████████████████ — classified
50 deps scanned via OSV.dev
34/433 prioritized files · 6a0368b
Multi-Agent Open Source
47
MetaGPT
FoundationAgents
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:3 M:57 I:12 CVE:55
Loop SafetyDependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
97 deps scanned via OSV.dev
60/919 prioritized files · 11cdf46
Multi-Agent Open Source
47
Agency Swarm
VRSEN
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:2 M:23 I:12 CVE:21
Loop SafetyDependency VulnerabilityTool Abuse Risk
Top finding ████████████████████████████████████ — classified
22 deps scanned via OSV.dev
60/313 prioritized files · 1df47b1
General Open Source
45
Strands Agents
AWS / Strands
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:3 M:13 I:24 CVE:9
Loop SafetyDependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
110 deps scanned via OSV.dev
60/1019 prioritized files · 693a826
General Open Source
44
smolagents
Hugging Face
Rejected Preliminary scan Jun 5, 2026 Static refresh · AI findings preserved
H:3 M:82 I:34 CVE:77
Loop SafetyDependency VulnerabilityPrompt SafetyTool Abuse Risk
Top finding ████████████████████████████████████ — classified
26 deps scanned via OSV.dev
27/77 prioritized files · e8b988d

Apply for a KYA™ evaluation.

Approved capabilities depend on your agent, operator, jurisdiction, cohort, and licensed infrastructure partners. A preliminary registry score does not guarantee financial access.

Apply for Access