#1313th of 14 in Security

superagent

SDK that blocks prompt injections and redacts PII in AI agent apps

Stars
6.8k
License
MIT
Last commit
Aug 2026
Last release
Sep 2025
Language
TypeScript
Stars, last 30 weeks+323
4 Apr 2026: 6,464 stars11 Apr 2026: 6,477 stars18 Apr 2026: 6,500 stars25 Apr 2026: 6,515 stars2 May 2026: 6,535 stars9 May 2026: 6,544 stars16 May 2026: 6,560 stars23 May 2026: 6,572 stars30 May 2026: 6,578 stars6 Jun 2026: 6,589 stars13 Jun 2026: 6,595 stars20 Jun 2026: 6,603 stars27 Jun 2026: 6,622 stars4 Jul 2026: 6,638 stars11 Jul 2026: 6,642 stars18 Jul 2026: 6,648 stars25 Jul 2026: 6,659 stars1 Aug 2026: 6,669 stars8 Aug 2026: 6,684 stars15 Aug 2026: 6,694 stars22 Aug 2026: 6,697 stars29 Aug 2026: 6,703 stars5 Sept 2026: 6,713 stars12 Sept 2026: 6,727 stars19 Sept 2026: 6,734 stars26 Sept 2026: 6,739 stars3 Oct 2026: 6,753 stars10 Oct 2026: 6,759 stars17 Oct 2026: 6,765 stars24 Oct 2026: 6,774 stars31 Oct 2026: 6,787 stars

6,464 on 4 Apr 20266,787 on 31 Oct 2026

From GitHub's daily star counts.

Checked on GitHub.

Overview

Superagent is a TypeScript and Python SDK (package `safety-agent`) with a guard call for detecting prompt injections and unsafe tool calls, a redact call for removing PII, PHI and secrets, and a scan call for finding repo poisoning aimed at agents. A red-team `test` call is listed as coming soon. It needs an API key from superagent.sh, and also ships a CLI and an MCP server.

Who it is for: Developers adding prompt-injection and PII protection to LLM apps

Strengths

  • Guard, redact and scan exposed as simple calls in both TypeScript and Python
  • Works with several providers: OpenAI, Anthropic, Google, Groq, Bedrock
  • Open-weight Guard models on HuggingFace, quoted at 50-100ms latency when self-hosted
  • Also ships a CLI and an MCP server for Claude Code and Claude Desktop

Weaknesses

  • Setup requires an API key from the hosted superagent.sh service
  • Red-team `test` feature is marked coming soon, not available yet
  • No self-hosting instructions or Docker setup in the README
  • Latest release is 2025-09-14, older than recent commits

What it needs

  • Needs Superagent API key (superagent.sh)
  • Models: OpenAI, Anthropic, Google, Groq, Bedrock

Quick answers

Is superagent open source?

Yes. Its code is on GitHub under the MIT license.

Also in Security

See all 14
Also in Security
RankProjectScore
1shannonAutonomous pentester that exploits web apps and APIs using source code analysis50.8k starsAGPL-3.091 out of 100
2ifixaiPython CLI that audits AI agents for policy, access and reliability failures42.1k starsApache-2.086 out of 100
3StrixAutonomous AI pentesting agents that validate vulnerabilities with working exploits73.2k starsApache-2.084 out of 100
#4pentagiAutonomous multi-agent penetration testing system with sandboxed security tools32.9k starsMIT78 out of 100
#5ai-infra-guardRed-teaming platform for AI infra CVEs, MCP servers, agent skills and jailbreaks7.3k starsApache-2.071 out of 100