Skip to content

docs: Add Inkog AI agent security scanning integration#2851

Closed
Benjamin Bandali (cloakmaster) wants to merge 1 commit into
langchain-ai:mainfrom
cloakmaster:docs/add-inkog-security-scanning
Closed

docs: Add Inkog AI agent security scanning integration#2851
Benjamin Bandali (cloakmaster) wants to merge 1 commit into
langchain-ai:mainfrom
cloakmaster:docs/add-inkog-security-scanning

Conversation

@cloakmaster

Copy link
Copy Markdown

Summary

  • Add integration page for Inkog, the first security scanner purpose-built for AI agent code
  • Inkog scans LangChain & LangGraph projects for behavioral vulnerabilities: prompt injection, infinite loops, token bombing, SQL injection via LLM, missing human oversight
  • Covers CLI usage (npx -y @inkog-io/cli scan .), MCP server setup for Claude Desktop/Cursor, GitHub Actions CI integration, and SARIF output for GitHub Security tab
  • All findings mapped to OWASP LLM Top 10, EU AI Act, and NIST AI RMF

Why this matters for LangChain developers

Inkog has native framework adapters for LangChain and LangGraph that understand chains, agents, tools, graph nodes, conditional edges, and state -- not just generic Python AST patterns. It helps developers catch security issues during development rather than in production.

Details

Test plan

  • Verify the page renders correctly in the docs preview
  • Confirm all external links are valid
  • Check formatting matches existing integration pages

🤖 Generated with Claude Code

Add integration page for Inkog, an open-source static analysis tool
for AI agent code. Covers CLI scanning, MCP server setup, GitHub
Actions CI, and detection patterns specific to LangChain/LangGraph.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@github-actions github-actions Bot added langchain For docs changes to LangChain oss python For content related to the Python version of LangChain projects external User is not a member of langchain-ai labels Feb 28, 2026
@cloakmaster

Copy link
Copy Markdown
Author

Closing this — looking at the integration template and existing pages, this page doesn't fit. Every tool integration under src/oss/python/integrations/tools/ documents a langchain-* Python package with pip install, import, instantiation, and invocation examples. Inkog is an external CLI tool, not a LangChain Python integration.

I'll open an issue to discuss whether security scanning documentation would be useful and where it would best fit in the docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

external User is not a member of langchain-ai langchain For docs changes to LangChain oss python For content related to the Python version of LangChain projects

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants