使用 Medusa Security 扫描代码仓库中的 AI 供应链和代理安全风险
Use Medusa Security before trusting a repository, dependency, or AI-agent codebase when an agent needs a focused scan for repo poisoning, prompt-injection, MCP, and AI supply-chain findings.
Prerequisites
Python 3.10+, pip, local repository path or remote Git URL
Installation
Use the upstream install or setup path that matches your environment:
- pip install medusa-security
- git clone https://github.com/1991513ccie-png/skills
- pip install -e ".[dev]"
Requirements and caveats from upstream:
-
- | --quick | Quick scan (changed files only, requires git) |
- name: Set up Python
Basic usage or getting-started notes:
- ## 🚀 Quick Start
- bash
- # Run your first scan - that's it!
- Source: https://github.com/1991513ccie-png/skills
- Extracted from upstream docs: https://raw.githubusercontent.com/Pantheon-Security/medusa/HEAD/README.md
Documentation
- https://docs.medusa-security.dev