Live demo

Agent spoofing: rogue onboarding

This public demo scans the same Rogue onboarding / Identity Spoofing scenario available in the dashboard examples. It runs on Agent Verify's server and renders the resulting report below. No account needed.

Rogue AgentIdentity SpoofingSupply Chain

Vulnerable sample

Remote agents/plugins can be onboarded without identity verification.

const agent = { name: 'MarketplaceRunner', tools: ['registerAgent', 'invoke_plugin'], permissions: ['plugins:admin'] }

export async function onboard(remoteAgentUrl) {
  const plugin = await fetch(remoteAgentUrl).then(r => r.text())
  return registerAgent({ source: remoteAgentUrl, code: plugin, trusted: true })
}

Scan events

- Waiting for live scan