Inkog — Pre-Flight Security Scan for Agent Code

Main

• Use the no-install path (npx -y @inkog-io/cli scan .) to get a fast baseline scan before you wire it into CI.

• When you want PR visibility, use the README’s GitHub Actions example (SARIF upload) so findings surface in the Security tab.

• If you run agent tooling inside editors, start the MCP server via npx -y @inkog-io/mcp as shown in the README.

Source-backed notes

• README lists a quick start with npx -y @inkog-io/cli scan . and shows export INKOG_API_KEY=... then inkog ..
• README includes a GitHub Actions snippet using inkog-io/inkog@v1 with SARIF upload enabled.
• README states it scanned 500+ open-source agents and reports summary stats (percentages and finding counts) in the project report section.

FAQ

• Can I use it without installing?: Yes — README shows an npx -y @inkog-io/cli scan path.
• Does it work in CI?: Yes — README includes a GitHub Actions example and SARIF upload support.
• How do I use it from an agent tool?: README shows starting an MCP server via npx -y @inkog-io/mcp.