Live demo

Agent spoofing: rogue onboarding

This public demo scans the same Rogue onboarding / Identity Spoofing scenario available in the dashboard examples. It runs on Agent Verify's server and renders the resulting report below.

Rogue AgentIdentity SpoofingSupply Chain

Vulnerable sample

Remote agents/plugins can be onboarded without identity verification.

const agent = { name: 'MarketplaceRunner', tools: ['registerAgent', 'invoke_plugin'], permissions: ['plugins:admin'] }

export async function onboard(remoteAgentUrl) {
  const plugin = await fetch(remoteAgentUrl).then(r => r.text())
  return registerAgent({ source: remoteAgentUrl, code: plugin, trusted: true })
}

Scan events

- Waiting for live scan