Agent-Threat-Rule /agent-threat-rules
Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.
- Stars
- 422 stars
- Forks
- 66 forks
- Language
- TypeScript
- License
- MIT
- Created
- Mar 9, 2026
- Last push
- Nov 2, 2026
- Updated
- Nov 2, 2026
In the Repository Index from the Seed Dataset since Oct 22, 2026.
Star History
193 days recorded, Apr 25, 2026 – Nov 3, 2026 (UTC). Net change +323 stars.
The star count of each day is the latest count less the net stars of the later days.
Add this Star History to a README
The images follow the light or dark theme of the page that shows them, and update every hour. Add ?theme=light or ?theme=darkto the chart address to keep one theme.
Star History chart
[](https://awesomerepos.com/Agent-Threat-Rule/agent-threat-rules)Badge
[](https://awesomerepos.com/Agent-Threat-Rule/agent-threat-rules)Timeline
This repository got 56 stars on May 14, 2026, its largest day since Apr 25, 2026.
It gained stars on 116 of the 193 days with a record.
Its largest 7 days were May 12, 2026 to May 18, 2026: 105 stars.
In the 30 days to Nov 3, 2026 it got 15 stars, 44% fewer than in the 30 days before.
It reached 100 stars on Apr 25, 2026, 47 days after it was created.
Its latest release is pyatr-v0.3.2, published on Nov 2, 2026.
- Created on the Repository Host
- Reached 100 stars
- +25 stars in one day
- Largest star day recorded: +56 stars
- +13 stars in one day
- Release pyatr-v0.3.1: pyATR v0.3.1
- Entered the Repository Index from the Seed Dataset
- Release v4.2.0: ATR v4.2.0 — 843 detection rules
- Release v4.2.1: ATR v4.2.1 — 844 detection rules
- Release pyatr-v0.3.2: pyATR v0.3.2
- Release v4.2.2: ATR v4.2.2 — 844 detection rules
- Latest push
From the Repository Host's creation date and releases, the Admission, the Star History, and the Observations. Star milestones show only when the Star History records the day. On the chart of net stars each day, a solid line marks a release.
Forks and pushes
From 13 Observations, Oct 22, 2026 – Nov 3, 2026. Forks +2. A new push was seen on 12 of 12 days.
- Oct 23, 2026: new push
- Oct 24, 2026: new push
- Oct 25, 2026: new push
- Oct 26, 2026: new push
- Oct 27, 2026: new push
- Oct 28, 2026: new push
- Oct 29, 2026: new push
- Oct 30, 2026: new push
- Oct 31, 2026: new push
- Nov 1, 2026: new push
- Nov 2, 2026: new push
- Nov 3, 2026: new push
A filled day: the last push time changed since the Observation before it.
Health facts
Measured facts in four separate dimensions, each with a date and a source. AwesomeRepos does not add them into one score. AwesomeRepos reads the weekly commits, the changelog, and the community files each week for the 5,000 visible repositories with the most stars and for each rising repository. How each check is defined
Maintenance
2 of 4 checks (2 without data)Yes: Not archived
GitHub does not mark the repository as archived. Source
Yes: A push in the last 90 days
Last push on 2026-11-02, 0 days ago. Source
No data: Commits in the last 13 weeks
No data: AwesomeRepos has not read the weekly commits.
No data: Commits in 26 or more of the last 52 weeks
No data: AwesomeRepos has not read the weekly commits.
Releases
1 of 3 checks (1 without data)Yes: A release in the last 365 days
Newest release pyatr-v0.3.2 on 2026-11-02, 1 day ago. 10 or more releases in the last 365 days. Source
No: The newest release tag is a semantic version
The newest release tag is pyatr-v0.3.2. Source
No data: A changelog file at the root
No data: AwesomeRepos has not scanned this repository.
Security practice
0 of 1 check (1 without data)No data: A security policy
No data: AwesomeRepos has not scanned this repository.
AwesomeRepos has not asked OpenSSF Scorecard about this repository.
Community files
1 of 3 checks (2 without data)Yes: A licence
GitHub finds the licence MIT. Source
No data: A contributing guide
No data: AwesomeRepos has not scanned this repository.
No data: A code of conduct
No data: AwesomeRepos has not scanned this repository.
Observations
What the Repository Host reported each day.
| Day (UTC) | Stars | Forks | Last push | Archived |
|---|---|---|---|---|
| Nov 3, 2026 | 422 | 66 | Nov 2, 2026 | No |
| Nov 2, 2026 | 422 | 66 | Nov 1, 2026 | No |
| Nov 1, 2026 | 423 | 66 | Oct 31, 2026 | No |
| Oct 31, 2026 | 423 | 66 | Oct 30, 2026 | No |
| Oct 30, 2026 | 422 | 66 | Oct 29, 2026 | No |
| Oct 29, 2026 | 421 | 66 | Oct 28, 2026 | No |
| Oct 28, 2026 | 421 | 66 | Oct 27, 2026 | No |
| Oct 27, 2026 | 421 | 66 | Oct 26, 2026 | No |
| Oct 26, 2026 | 422 | 66 | Oct 25, 2026 | No |
| Oct 25, 2026 | 422 | 66 | Oct 24, 2026 | No |
| Oct 24, 2026 | 422 | 66 | Oct 23, 2026 | No |
| Oct 23, 2026 | 422 | 65 | Oct 22, 2026 | No |
| Oct 22, 2026 | 421 | 64 | Oct 22, 2026 | No |