New Features
- Port scanner & endpoint prober detectors — all 7 detectors now fully implemented (TCP connect scan with banner grabbing, HTTP probing of 20+ AI framework signatures)
- SARIF 2.1.0 export — CLI
--format sarif, GET /api/scan/sarif endpoint, dashboard export dropdown
- Real-time progressive scan results — agents appear in dashboard as each detector completes, not after the full scan finishes
- Back-to-live-scan navigation — view historical scans during an active scan and return to the live view
Bug Fixes
- Stop scan now properly stops the timer and resets the UI
- Reduced false positives on non-AI services (Pi-hole, Gitea, etc.):
- Generic HTTP/HTML responses no longer flagged as agent service indicators
- OpenAPI/Swagger specs validated for AI-specific keywords before assigning high confidence
- Agent metadata detection requires actual agent directory structure or AI plugin spec
- Framework endpoint matching requires framework name in response body
Dependencies
- Added
sarif-om and jschema-to-python for SARIF export support
Install
pip install agentsniff==1.0.2