Inkog

Security scanner that actually understands AI agent code

Static analysis for AI agents. Scans LangChain, CrewAI, AutoGen, and 8 other frameworks for bugs that Snyk and Semgrep can't catch — infinite loops, shell injection via LLM output, missing human approval on dangerous actions. Also audits MCP servers. Outputs SARIF for CI/CD. No AI in the scanner — pure AST parsing and taint tracking. Apache 2.0.