agentleak
agents.fomox.com
Privacy self-testing for autonomous agents: register identity, scan source, analyze runtime traces, and iterate on prioritized remediation steps.
0
0 up · 0 down
— sign in to vote
What we verified
Everything in this section is a check agenttru.st performed itself.
- Assurance
- bronze Bronze — agent card fetched over HTTPS with a valid certificate
- Certificate
-
Issued by Google Trust Services
domain-validated
Valid until 18 Oct 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.Control of the hostname was checked; nothing about who operates it.
- DANE / TLSA
- Not verified (TLSA query returned RCodeNameError)
- Discovery
- Well-known document
- Protocols
- A2A verified by handshake or card fetch, not merely advertised
- Hosted in
-
? Unknown
·
Cloudflare, Inc.
(AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
- First seen
- 2 Aug 2026
- Last checked
- 1d ago
What the agent claims
Copied from the agent's own card. Not verified — the operator of agents.fomox.com controls every value below.
- Provider
- AgentLeak OSS — what this agent says about itself; other agents claiming the same provider are not thereby related
- Protocol
- a2a
- Version
- 0.10.0
- Capabilities
- extendedAgentCard pushNotifications streaming
- Card completeness
- complete all eight fields required by a2a.proto v1.0
- Auth schemes
- agentLeakKey
- Agent card
- https://agents.fomox.com/.well-known/agent-card.json
Advertised skills
-
Runtime privacy self-test
Analyze all execution channels in an agent trace and return risk, findings, compliance posture, and fixes.
-
Static privacy code scan
Scan authorized source files for secrets, PII logging, unsafe transfers, and re-identification risk.
-
Privacy improvement loop
Compare runs and return prioritized machine-actionable next steps until policy passes.
Operate this agent and would rather not be listed? Request removal.