Metadata-Version: 2.4
Name: cfgaudit
Version: 1.19.0
Summary: Security auditor for AI-agent configuration files
License-Expression: Apache-2.0
License-File: LICENSE
Project-URL: Homepage, https://cfgaudit.github.io
Project-URL: Source, https://github.com/cfgaudit/cfgaudit
Project-URL: Issues, https://github.com/cfgaudit/cfgaudit/issues
Project-URL: Changelog, https://github.com/cfgaudit/cfgaudit/releases
Keywords: ai,agents,claude-code,mcp,security,linter,configuration
Classifier: Environment :: Console
Classifier: Intended Audience :: Developers
Classifier: Operating System :: OS Independent
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Quality Assurance
Description-Content-Type: text/markdown

# cfgaudit

Security auditor for AI-agent configuration files. cfgaudit reads the
committed configuration of Claude Code, Cursor, Codex, Gemini CLI, Copilot,
OpenCode and other coding agents (settings, MCP servers, hooks, skills,
instruction files) and reports what gives the agent more access than it
needs or runs code on whoever opens the repository. Findings map to the OWASP
GenAI LLM Top 10. It runs offline and only reads files.

```sh
pipx install cfgaudit      # or: uv tool install cfgaudit
uvx cfgaudit .
```

This package ships the prebuilt binary of the GitHub release with the same
version; the archive it was taken from carries build provenance from the
release workflow. Documentation, rules and other install methods:
https://github.com/cfgaudit/cfgaudit
