macOS
brew install humanboundlocal Homebrew formula metadata
brew / Rang 11927
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für humanbound in AI-Agent-Workflows.
Installation
brew install humanboundlocal Homebrew formula metadata
Überblick
Adversarial security testing engine, SDK, and CLI for AI agents
Verlauf
Humanbound is an open-source adversarial testing engine, Python SDK, and hb command-line interface for AI agents. It drives multi-turn attacks against live agent endpoints, evaluates failures, and can turn findings into runtime guardrail rules.
The official Humanbound repository was created in February 2026 and is maintained by the verified Humanbound GitHub organization. The project combines an Apache-licensed local engine with an optional hosted platform, allowing initial testing without a login while preserving a path to managed posture tracking.
The official release notes describe a consolidation around the humanbound PyPI package: the earlier humanbound-cli package was yanked, and the CLI and public SDK now ship together. The same repository also integrates with the sibling humanbound-firewall package for a test-to-guardrail workflow.
Humanbound is a young project, so its reliable adoption history is limited. Official materials show distribution through PyPI, Homebrew in the supplied package facts, and an official GitHub Action for security gates in continuous integration.
Users describe an agent endpoint in a JSON configuration file and optionally define permitted and restricted behavior in a scope file. The hb test command runs attacks locally or through the platform; hb posture, hb logs, and hb report inspect the results.
Local attack generation and judging can use OpenAI, Anthropic, Gemini, Azure OpenAI, Grok, or Ollama. Provider settings resolve from CLI flags, environment variables, and then ~/.humanbound/config.yaml; platform login credentials are stored under ~/.humanbound/.
Humanbound is notable as an AI-security tool that packages an engine, SDK, and CLI under one Python distribution while keeping the firewall as a composable sibling package. Its optional extras let package users choose the provider engine, firewall runtime, or both.
Sicherheitslage
Für humanbound wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
~/.humanbound/config.yamlCredential-bearing paths to review before unattended agent runs.
~/.humanbound/Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
hb | Executable | indexiertes Executable | Aus dem lokalen Executable-Index erkannt. |
Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Installationsmetadaten
| Paketschlüssel | brew:humanbound |
|---|---|
| Version | 2.8.0 |
| Paketmanager | Homebrew |
| Homepage | https://docs.humanbound.ai/ |
| Zuletzt aktualisiert | 2026-07-31T00:17:01Z |
| Pulse | updated |
| Bottle | nicht erfasst |
| Dienst | keiner deklariert |
Quellspur
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
View the package source record on GitHub.