Geiger是一款由Atomburst团队开发的开源命令行工具,用于扫描和清点机器上所有的AI代理、MCP服务器、插件和扩展1。该工具采用只读方式运行,不收集遥测数据,用户可通过执行npx geiger-scan命令即时启动扫描,无需安装或创建账户1。
工具支持多种权限和资源访问检测,包括代码执行、凭证持有、文件系统访问以及网络访问等能力1。Geiger提供灵活的输出选项,可生成终端显示、HTML报告或JSON格式的扫描结果,并支持通过--diff baseline.json命令进行差异对比以实现漂移检测1。作为一个依赖为零的工具,Geiger无需构建步骤,其依赖检查通过GitHub Actions签名验证确保安全性1。该项目采用MIT许可证发布1。
Geiger is an open-source command-line tool developed by Atomburst that scans and inventories all AI agents, MCP servers, plugins, and extensions running on a machine, reporting in plain text the permissions and resources each program can access.1 The tool operates in read-only mode, collects no telemetry data, and requires no installation, account setup, or authentication to run via the command npx geiger-scan.1
The tool can detect and report on code execution capabilities, credential access, file system permissions, and network access across identified agents and extensions.1 Geiger supports multiple output formats including terminal display, HTML reports, and JSON, and features a drift detection capability through the --diff baseline.json option for comparing system changes over time.1 Built with zero dependencies and no build steps required, Geiger performs dependency verification through GitHub Actions signature validation.1 The project is released under the MIT license.1
The release comes as the AI agent ecosystem continues to expand rapidly, with an open-source agent framework reaching over 200,000 GitHub stars within three weeks as of August 2026, and a corresponding plugin ecosystem growing to 13,000 repositories.1
评论
还没有评论,欢迎留下第一条。