openauditA100out of 100: openaudit's audit of itself
code.agent-config

AI agent configuration

Audits committed AI-agent configuration: hidden Unicode and hidden instructions in AGENTS.md and Cursor/Copilot/Windsurf/Cline/Gemini rule files, unpinned or plaintext MCP servers and inlined credentials in MCP configs, and over-broad Claude Code, Gemini CLI and Codex permission settings.

Engine
Built-in
Targets
Codebase
Areas
Security, Supply chain
Runs
By default, when the target applies
Network
Only the target itself

Run only this auditor

bunx @openaudit/cli . --only code.agent-config

Built into openaudit; nothing to install.