Scan repositories for AI supply-chain and agent-security risks with Medusa Security

Use Medusa Security before trusting a repository, dependency, or AI-agent codebase when an agent needs a focused scan for repo poisoning, prompt-injection, MCP, and AI supply-chain findings.

Prerequisites

Python 3.10+, pip, local repository path or remote Git URL

Installation

Use the upstream install or setup path that matches your environment:

• pip install medusa-security
• git clone https://github.com/yourusername/medusa.git
• pip install -e ".[dev]"

Requirements and caveats from upstream:

• 
• | --quick | Quick scan (changed files only, requires git) |
• name: Set up Python

Basic usage or getting-started notes:

• 🚀 Quick Start

• bash

• Run your first scan - that's it!

• Source: https://github.com/Pantheon-Security/medusa

• Extracted from upstream docs: https://raw.githubusercontent.com/Pantheon-Security/medusa/HEAD/README.md

Documentation

• https://docs.medusa-security.dev

Source

• Agent Skill Exchange