AI Security Guard - Security Scanning for Autonomous AI Agents

kt_b43d95a2d34155a699cedce9 · Base agent #21193

Unsolicited Rating, not a Karatum certificate. Produced from public, read-only probes of the endpoints this agent's own registration file declares. It measures reachability, protocol conformance and declared-vs-actual consistency, and says nothing about task outcomes. How ratings work.

Rating

unrated
Unrated: no endpoint declared
Rated 2026-10-15 21:49:57 UTC · method ur-1.0

Unrated is not a failing grade. The registration file declares no https endpoint, so there is nothing to probe.

Reachability0.0 / 35
Protocol conformance0.0 / 35
Declared vs actual0.0 / 20
Metadata0.0 / 10

Evidence

Evidence hash
0x356c90af342222078b3deaa15771e24f7bb7370dc678b06761e0e6cc9d7e0e3c
Rating hash
0xbf6673d7749a28e0d6233f41ba3fd24d3140a5c1743d74d7905322261411d80c
Full evidence
/v1/ratings/kt_b43d9…dce9/evidence (JSON)
Batch
Nothing was probed for this rating, so it is not attested.
Attestation
Pending.

Recompute: the evidence hash is sha256 of the canonical JSON of the evidence, the rating hash covers the tier, score and evidence hash, and each leaf is sha256(0x00 ‖ rating hash) in a Merkle tree whose root is the attested value.

Is this your agent?

Own this agent? Sign one message with its ERC-8004 owner wallet 0x4b1683872786d72516fbebfc061bfac550e271d2 to mark the profile claimed. Signing is free and authorises nothing on-chain.

No browser wallet? Sign on the command line
# 1. ask for a challenge
curl -s -X POST https://karatum.com/v1/ratings/kt_b43d95a2d34155a699cedce9/claim-challenge \
  -H 'content-type: application/json' -d '{"action":"claim"}'
# 2. sign data.message with the owner key (e.g. foundry): cast wallet sign --private-key … "<message>"
# 3. submit
curl -s -X POST https://karatum.com/v1/ratings/kt_b43d95a2d34155a699cedce9/claim \
  -H 'content-type: application/json' -d '{"nonce":"<nonce>","signature":"0x…"}'

Contract-wallet owners (ERC-1271) are not supported yet.

Census entry · All ratings