api-relay-audit

项目详情摘要

API Relay Audit Local security audit for AI API relays and LLM proxies. DSH Plugin Your Agent Is Mine: what you can test locally Your Agent Is Mine* documents malicious API relays injecting payloads and exfiltrating credentials. Anthropic's September 10, 2026 report describes fraudulent Claude resellers swapping models and harvesting credentials through their client tooling. In his September 11 disclosure, co-author Chaofan Shou reports buying router data containing users' credentials. API Relay Audit is an independent, local security audit tool for AI API relays and LLM proxies, informed by the paper. The current release checks observable relay behavior and generates a Markdown report covering: **Prompt and context signals:** hidden prompt injection, instruction override, and context truncation. **Response integrity:** changes to pinned package-command text, error-response leakage, and SSE stream anomalies. **Reviewable findings:** per-step evidence and `LOW / MEDIUM / HIGH` summaries; inconclusive probes remain visible. See the output:** example report (synthetic fixture) · **Try it:** run a local audit · Coverage and limits The standalone script uses Python's standard library plus `curl`. Your API key is sent only to the relay URL you choose. Quick Start See a public-safe fixture report: sanitized audit report. Use `master` as `AUDIT_SCRIPT_REF` only when intentionally testing unreleased changes. If API Relay Audit helps you evaluate a relay before sending real traffic, star the repository to follow new detector coverage and release-tested updates. When to Use It You use a third-party AI API relay, mirror, gateway, or LLM proxy. You want to check whether a Claude-compatible or OpenAI-compatible proxy injects prompts, swaps models, truncates context, or rewrites tool