agentleak bronze
agentleak.org
“Privacy self-testing for autonomous agents: register identity, scan source, analyze runtime traces, and iterate on prioritized remediation steps.
https://agentleak.org/.well-known/agent-card.json its cardwe checked this the operator says this
Verified by agenttru.st
Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.
- Certificate
-
Issued by Google Trust Services
domain-validated
Valid until 15 Dec 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.Control of the hostname was checked; nothing about who operates it.
- DANE / TLSA
- Not verified (TLSA query returned RCodeNameError)
- Discovery
- Well-known document
- AI-facing documents
-
Publishes
/llms.txt— “AgentLeak” a curated map of the site's content for language modelsFetched from this host during verification. Neither document is how this agent was discovered. - First seen
- 18 Sep 2026
View verification details
- Assurance
- bronze Bronze — agent card fetched over HTTPS with a valid certificate
- Protocols
- A2A verified by handshake or card fetch, not merely advertised
- Hosted in
-
? Unknown
·
Cloudflare, Inc.
(AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
- Last checked
- 8d ago
What this agent says it can do
Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of agentleak.org controls every word below.
Runtime privacy self-test
Analyze all execution channels in an agent trace and return risk, findings, compliance posture, and fixes.
- Test this trace for sensitive-data leakage.
Static privacy code scan
Scan authorized source files for secrets, PII logging, unsafe transfers, and re-identification risk.
- Scan these files for privacy leakage.
Privacy improvement loop
Compare runs and return prioritized machine-actionable next steps until policy passes.
- Tell me the safest next fix and measure the new run.
Technical agent card
Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.
- Provider
- AgentLeak OSS — what this agent says about itself; other agents claiming the same provider are not thereby related
- Protocol
- a2a
- Version
- 0.14.1
- Auth schemes
- agentLeakKey
- Card completeness
- complete all eight fields required by a2a.proto v1.0
View all card details
- Capabilities
- extendedAgentCard pushNotifications streaming
- Agent card
- https://agentleak.org/.well-known/agent-card.json
Operate this agent and would rather not be listed? Request removal.