agenttru.st

Sigil bronze

sigilsec.ai

“AI agent supply chain security scanner. Quarantines and scans repos, packages, and MCP servers before they run. Eight-phase static analysis with quarantine-first workflow. Runs as a CLI, MCP server with 12 tools, Claude Code plugin, or CI/CD step.

a2a https://sigilsec.ai talk to it https://sigilsec.ai/.well-known/agent-card.json its card
🇺🇸 US · Amazon.com, Inc. Checked 4d ago a2aVersion, supportedMessageParts, supportsPushNotifications

we checked this    the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate
Issued by Let's Encrypt domain-validated
Valid until 21 Jan 2027 as of our check on 10 Nov 2026.
Control of the hostname was checked; nothing about who operates it.
Key RSA 2048, signed SHA256-RSA, issued via YR1 under ISRG Root X1 — classical, as every publicly trusted certificate is today.
Names on this certificate (1)

sigilsec.ai.

Connection
TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 10 Nov 2026. What this means
DANE / TLSA
Not verified (TLSA query returned RCodeNameError)
Discovery
Well-known document
AI-facing documents
Publishes /llms.txt — “SIGIL — Comprehensive Technical Reference” a curated map of the site's content for language models
Fetched from this host during verification. Neither document is how this agent was discovered.
First seen
10 Nov 2026
View verification details
Assurance
bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols
A2A verified by handshake or card fetch, not merely advertised
Hosted in
🇺🇸 US · Amazon.com, Inc. (AS16509)
Last checked
4d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of sigilsec.ai controls every word below.

Scan File or Directory

Scan a local file or directory for supply chain security threats. Runs eight-phase static analysis: install hooks, code patterns, network exfiltration, credentials, obfuscation, provenance, prompt injection, and skill security.

Examples it gives
  • Scan this directory for security threats
  • Check src/lib for malicious patterns

Scan Package from Registry

Download and scan a package from npm or PyPI. The package is downloaded into quarantine and scanned across all eight phases before anything is installed.

Examples it gives
  • Scan the npm package express before installing
  • Check if langchain-toolkit on PyPI is safe

Clone and Scan Repository

Clone a git repository into quarantine and scan it. The repo is held in quarantine until explicitly approved or rejected.

Examples it gives
  • Clone and scan this GitHub repo before using it
  • Check this repository for supply chain threats

List Quarantined Items

List all items currently held in quarantine with their status, source, risk score, and quarantine ID.

Examples it gives
  • Show what's in quarantine
  • List all quarantined packages

Approve Quarantined Item

Release a quarantined item from quarantine for installation or use. Moves the item out of the quarantine directory.

Examples it gives
  • Approve this quarantined package for installation
  • Release express from quarantine

Reject Quarantined Item

Permanently delete a quarantined item. The downloaded files are removed from the quarantine directory.

Examples it gives
  • Reject and delete this quarantined package
  • Remove the flagged package from quarantine

Grade Path

Letter grade (A-F), recommendation, behaviour profile and key risks for a path. Cheaper to read than sigil_scan when only the verdict matters.

Examples it gives
  • Grade this repository
  • What grade does src/ get?

Scan Host for Agent-Tooling Residue

Read-only scan of this machine for what installed agent tooling left behind: shell rc edits, cron/launchd/systemd persistence, git hooks, world-readable credential files, leftover tool directories, /etc/hosts redirects, global agent packages. Nothing is changed.

Examples it gives
  • What did that agent tool leave on my machine?
  • Scan this host for residue

Plan Residue Cleanup

Show the reversible fixes Sigil would make for host residue, without applying them. Apply and rollback are not exposed as tools; a human runs them in a terminal.

Examples it gives
  • Show me what Sigil would clean up
  • Plan the residue cleanup

Check Package in Scan Database

Look up a package or skill's risk assessment in the Sigil public scan database. Works for ClawHub skills, PyPI packages, npm packages, GitHub repos, and MCP servers. Does not require the Sigil CLI.

Examples it gives
  • Has the npm package express been scanned?
  • Check the todoist-cli skill on ClawHub

Search Scan Database

Search the Sigil public scan database for packages by name or keyword. Returns scanned packages with their verdicts and risk scores. Does not require the Sigil CLI.

Examples it gives
  • Search the scan database for langchain
  • Find scanned MCP servers matching 'github'

Report Threat

Report a malicious file to the Sigil threat intelligence database by its SHA256 hash. Requires the Sigil CLI and an authenticated session (sigil login). Reports are reviewed by the security team.

Examples it gives
  • Report this file hash as malware

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Protocol
a2a
Card completeness
a2a.proto v1.0 requires eight top-level fields. This card omits:
defaultInputModesdefaultOutputModessupportedInterfacesversion
Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.
View all card details
Capabilities
a2aVersion supportedMessageParts supportsPushNotifications
Agent card
https://sigilsec.ai/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.